m[.]fxgtlife[.]cc

Analysis of domain m.fxgtlife.cc indicates a high-risk phishing infrastructure targeting users of the FXGT trading platform. The domain, registered on July 15, 2025, through Gname.com Pte. Ltd., currently resolves to 188.114.97.3 (Cloudflare, Inc., Canada) and returns an HTTP 200 status. Cloudflare nameservers (kia.ns.cloudflare.com, nicolas.ns.cloudflare.com) and technologies including Ant Design, Vue.js, and HTTP/3 are present, consistent with modern phishing kits designed to evade detection. Google Safe Browsing has flagged the site for social engineering, and 14 of 91 security vendors on VirusTotal classify it as malicious. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The page title explicitly displays 'FXGT', aligning with the reported scam type of a fake exchange. SSL certification is provided by Google Trust Services (WE1), a common tactic to lend false legitimacy. Defenders should note the domain's recent creation (less than one year old) and its continued activity as of July 12, 2026. While the exact content and functionality of the site remain unanalyzed, the combination of infrastructure, blocklist presence, and vendor detections strongly suggests an active threat. Network-level blocking of 188.114.97.3 and the domain itself is recommended, alongside monitoring for related subdomains or newly registered lookalike domains. No evidence of compromise or lateral movement within networks has been observed, but user reports of interaction with this domain should be treated as potential credential theft or financial fraud incidents.