ghostgunsaustralia[.]com

PhishDestroy identifies the domain ghostgunsaustralia.com as hosting a ghost gun sales scam, currently under active investigation for fraudulent activity related to unauthorized firearms trafficking. The site falsely markets untraceable firearm kits, likely targeting Australian consumers seeking restricted weaponry through illicit channels. Domain reputation analysis reveals no immediate blocklist presence, but behavioral indicators suggest a high-risk scam operation designed to harvest payment details under false pretenses. This domain was flagged by 1 of 95 VirusTotal vendors and resolves to IP 185.255.122.94. Registered through Gransy, s.r.o. on April 18, 2026, the domain uses a DigiCert Inc SSL certificate to appear legitimate. Historical DNS records show no prior associations with known malicious infrastructure, yet its recent creation and thematic content align with emerging ghost gun scam networks exploiting firearm regulation gaps. Trust scores remain neutral pending deeper behavioral analysis. Given the active status and lack of prior detections, PhishDestroy recommends immediate network-level blocking of 185.255.122.94 and domain quarantine. Organizations should flag ghostgunsaustralia.com in proxy filters and SIEM rules using IOCs: domain creation date (2026-04-18), registrar (Gransy, s.r.o.), and IP (185.255.122.94). Consumers should avoid transactions and report suspicious firearm sales to cybercrime units. Further intelligence will be updated as investigation progresses.