gilttradefx[.]com

The domain gilttradefx.com was registered on February 5 2024 through Dynadot Inc. It is hosted on the IP address 188.114.96.3 and uses Cloudflare name servers imani.ns.cloudflare.com and lewis.ns.cloudflare.com. Since its creation the domain has been flagged by multiple security services: PhishDestroy lists it as blocked, and it appears on one public blocklist. VirusTotal scans show that six out of ninety‑one AV engines currently flag the domain as malicious, indicating a moderate level of consensus among scanners. The threat is categorized as generic phishing, and the domain remains active as of the report date, July 27 2026.

Publicly available intelligence does not include a page title, SSL certificate details, or HTTP response codes, so the exact content served by the site has not been confirmed. No additional indicators such as compromised credentials, payload hashes, or associated command‑and‑control infrastructure have been reported. The limited visibility means that defenders cannot confirm the specific lure or credential‑harvesting technique employed, only that the domain fits the profile of a phishing‑related infrastructure. Given the registration date, active status, and existing detections, security teams should treat gilttradefx.com as hostile.

Recommended actions include adding the domain and its resolving IP address to outbound and inbound block lists, monitoring DNS queries for the associated Cloudflare name servers, and ensuring that email filtering rules block any messages referencing the domain. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is advised to capture any changes in detection scores. Organizations should also consider sharing any newly observed indicators with threat‑sharing communities to improve collective detection capability.