gtcrypto[.]top

The domain gtcrypto.top was registered through Gname.com Pte. Ltd. on July 14, 2026 and remains active as of the report date, July 17, 2026. DNS resolution is handled by four share‑dns nameservers (a.share-dns.com, a12.share-dns.com, b.share-dns.net, b12.share-dns.net) and resolves to the IPv4 address 109.206.246.192. Google Safe Browsing classifies the site under the SOCIAL_ENGINEERING category, indicating it is being used to deceive users. VirusTotal analysis shows a single detection out of 91 scanned security vendors, confirming that at least one vendor has identified malicious behavior associated with the domain. The available intelligence does not include details about the site’s hosted content, specific phishing lure, or the underlying infrastructure beyond the observed IP and nameservers. Consequently, the exact scope of the campaign, target audience, and potential payload remain uncertain. Defenders should block network traffic to the identified IP address and add the domain to URL filtering policies. Continuous monitoring of the associated IP and DNS records is advised, as changes to the infrastructure could indicate escalation or diversification of the campaign. Organizations should also advise users to avoid interacting with any unsolicited communications referencing gtcrypto.top, given its confirmed social‑engineering status.