gordenmart[.]cfd

PhishDestroy identifies gordenmart.cfd as an active fake online retail phishing domain under investigation. The site masquerades as a legitimate online marketplace to harvest payment credentials and personal data from unsuspecting shoppers. This campaign is classified as a high-risk credential-harvesting threat due to its deceptive e-commerce facade and active infrastructure.

This domain was flagged on April 02, 2026, resolving to IP address 188.114.97.3 and registered through Aceville Pte. Ltd. using a Let’s Encrypt SSL certificate. VirusTotal currently shows 4 out of 95 engines detecting the threat, indicating it remains under the radar. The domain’s recent creation and clean detection profile suggest it is a newly deployed scam site. No entries were found on major blocklists or threat intelligence feeds at the time of analysis, which correlates with the low detection rate.

To mitigate risk, users should avoid accessing gordenmart.cfd and verify any online store’s legitimacy via official channels or trusted reviews. Block the domain at the network level and report the site to your email provider, browser vendor, or threat intelligence platforms. If credentials were entered, change passwords immediately and monitor financial accounts for unauthorized activity. Organizations should add the IP and domain to firewall and IDS/IPS blocklists using the seed ac1817 for tracking.