grabixpro[.]trade

The domain grabixpro.trade is currently active and has been classified as a generic phishing operation. Registration records show the domain was created on July 23, 2026 and is listed under the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative name servers are becky.ns.cloudflare.com and coby.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure.

Threat intelligence indicates that the domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reflecting recognition by at least one anti‑phishing platform. VirusTotal analysis reports that five out of ninety‑one scanning engines have flagged the domain as malicious, providing additional corroboration of its phishing nature. No further public assessments, such as Safe Browsing or OTX entries, are available in the current data set.

The limited detection footprint suggests that the campaign may be in an early stage or employing evasion techniques to reduce exposure. Defenders should proactively block network traffic to 188.114.97.3 and add grabixpro.trade to local URL filtering and DNS block lists. Continuous monitoring of the domain’s reputation, especially any changes in detection counts or blocklist status, is recommended to adapt defensive controls as the campaign evolves.