gointrads[.]top

The domain gointrads.top was identified as a generic phishing threat impersonating the Sofea-forex brand. Currently offline, this domain posed an elevated risk to users who may have been tricked into providing sensitive information. The domain was created on March 9, 2026, and registered through Gname.com Pte. Ltd., a registrar sometimes associated with malicious domains. It resolved to IP address 209.74.67.58 and used an SSL certificate issued by Sectigo Limited, which may have lent it an undeserved appearance of legitimacy.

PhishDestroy's analysis shows that gointrads.top was flagged by 3 out of 95 VirusTotal vendors, indicating moderate detection by security tools. The domain appeared on three security blocklists, confirming its malicious reputation. The page title "Sofea-forex" suggests the phishing attempt targeted users of the Sofea-forex trading platform, likely aiming to harvest login credentials or financial data. The combination of a newly registered domain, suspicious registrar, and low but notable vendor flags underscores the need for vigilance.

Given that gointrads.top is now offline, the immediate threat has been mitigated. However, users who may have interacted with this domain should change their passwords for any related accounts and monitor for unauthorized activity. PhishDestroy recommends enabling multi-factor authentication on all financial platforms and avoiding clicking on links in unsolicited emails or messages. Security teams should add this domain to their blocklists to prevent future access, and users should verify the authenticity of any site claiming to represent Sofea-forex by checking official channels.