guildtransfer[.]net

The domain guildtransfer.net was registered on February 21, 2026 through NameCheap, Inc. and is delegated to the Cloudflare nameservers braden.ns.cloudflare.com and dana.ns.cloudflare.com. DNS resolution points to IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site lacks an SSL certificate, indicating that it is served over plain HTTP only. The page title returned from the host is "Discord - Group Chat That’s All Fun & Games," suggesting an attempt to reference a well‑known communication platform, though no further content analysis is available.

Detection and mitigation data show that guildtransfer.net is listed on three independent security blocklists and has been actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. VirusTotal analysis recorded detections from two of ninety‑three scanned security vendors, reinforcing the suspicion of malicious intent. Additionally, Gridinsoft assigns the domain a trust score of 0 out of 100, indicating a complete lack of confidence in the site's legitimacy.

The current operational status of the domain is reported as offline, which may be the result of takedown actions or temporary hosting issues. Nevertheless, the existing indicators—blocklist listings, vendor detections, a zero trust score, and the use of a recognizable brand name in the page title—strongly suggest that guildtransfer.net was employed for a generic phishing campaign targeting users of the Discord service.

Defenders should continue to block the domain at perimeter and endpoint controls, monitor the associated IP address for any re‑use, and enforce HTTPS‑only policies to prevent accidental connections to non‑TLS sites. Given the Cloudflare hosting, any future activation of the domain could leverage the same infrastructure, so threat‑intel feeds should be updated to include guildtransfer.net and its IP address.