gainlitex[.]info

The domain gainlitex.info has been observed in multiple threat‑intel feeds as a high‑risk generic phishing site. Registration data shows the domain was created on 19 June 2025 through NameCheap, Inc. and is currently pointed to the IPv4 address 88.223.85.67. The authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, which are commonly used for parked or abused domains.

VirusTotal submissions indicate that 2 of 91 security vendors flag the domain as malicious, suggesting at least some detection engines have identified suspicious behavior. The domain is listed on a single public blocklist and has been added to the PhishDestroy blocklist, confirming that at least one anti‑phishing service has taken mitigation action. No additional public intelligence such as Safe Browsing alerts, OTX identifiers, SSL certificate details, HTTP response codes, or page‑title metadata is available, leaving the full scope of the phishing campaign uncertain.

Defenders should treat any traffic to gainlitex.info as hostile, block the domain at perimeter firewalls, DNS resolvers, and proxy filters, and monitor for any outbound connections to the hosting IP. Continuous re‑evaluation is advised, as the infrastructure could be repurposed or expanded. Incident response teams encountering related phishing emails should reference the observed indicators—creation date, registrar, name servers, IP address, and the two VirusTotal detections—to enrich detection rules and enrich threat‑intel feeds.