gstwjy[.]com

PhishDestroy identifies gstwjy.com as an active fake login phishing domain designed to harvest user credentials. The domain does not impersonate a specific brand but employs generic social engineering tactics to trick visitors into submitting sensitive login information. Threat actors may use this infrastructure to gain unauthorized access to accounts, enabling further exploitation such as account takeovers, financial theft, or identity fraud. This domain resolves to IP address 188.114.96.3 and was registered through Chengdu West Dimension Digital Technology Co., LTD. The domain was created on March 31, 2026, and currently holds a VirusTotal detection rate of 9/95 security vendors. It has been flagged by Google Safe Browsing under the category SOCIAL_ENGINEERING and appears on 1 known security blocklist. Additionally, the domain utilizes a Let's Encrypt SSL certificate to appear legitimate and evade browser warnings. The domain is actively blocked by InversionDNS and remains flagged as elevated risk. While current mitigation efforts have neutralized immediate threats, users should remain cautious of similar domains. PhishDestroy advises verifying any suspicious links or websites before entering personal or login credentials. Remaining risk is moderate due to ongoing domain activity and potential for new phishing campaigns leveraging similar tactics.