gigarush.com

Analysis of gigarush.com shows multiple indicators of compromise consistent with a high‑risk phishing operation. The domain was registered on December 31, 2012 and is hosted behind Cloudflare infrastructure, resolving to IP address 172.67.164.84. Its SSL certificate is issued by Google Trust Services under the WE1 label, a common configuration for domains that rely on Cloudflare's reverse‑proxy services. VirusTotal records indicate that six of ninety‑one scanned security vendors have flagged the domain, suggesting a non‑trivial detection history. Additionally, AlienVault OTX lists gigarush.com in seven distinct threat‑intel pulses, reinforcing its association with malicious activity. The domain remains active, and its public nameservers (dilbert.ns.cloudflare.com and paloma.ns.cloudflare.com) confirm continued Cloudflare registration. While the exact phishing payload or targeted brand has not been disclosed in the available intelligence, the convergence of detection counts, OTX references, and persistent hosting suggests an operational phishing campaign. Defenders should block network resolution to 172.67.164.84, monitor for outbound connections to that address, and add gigarush.com to URL filtering and email security policies. Continuous re‑evaluation is advised as further indicators may emerge.