pc[.]gtcfxvvus[.]com

Analysis of the domain pc.gtcfxvvus.com confirms its classification as a phishing site targeting users through a GTCFX-themed fraudulent scheme. The domain, registered on June 25, 2025, via Gname.com Pte. Ltd., is currently offline with an HTTP 503 status, though it remains flagged by multiple security sources. Infrastructure analysis reveals Cloudflare hosting (AS13335, US) with nameservers eve.ns.cloudflare.com and hasslo.ns.cloudflare.com, resolving to IP 172.67.213.123. The site's page title, 'GTCFX,' aligns with its phishing theme, though the exact content and target audience remain unconfirmed due to its offline status.

Detection data indicates elevated risk: the domain appears on three security blocklists (PhishDestroy, MetaMask, and SEAL) and holds a Gridinsoft trust score of 0/100. Four of 94 security vendors on VirusTotal flagged the domain as malicious, though this partial detection rate suggests variability in vendor assessments. Technologies detected include Ant Design, Vue.js, and Cloudflare Browser Insights, which may reflect efforts to create a convincing facade or track victim interactions. The domain's recent creation (13 months old at the time of reporting) and use of Cloudflare's infrastructure are consistent with phishing campaigns seeking to evade takedowns.

Defenders should treat this domain as confirmed malicious. Blocklist integration is recommended, particularly for financial or trading-related services, given the GTCFX branding. While the site is offline, monitoring for re-emergence under the same or similar infrastructure (e.g., Cloudflare ASN, Gname.com registrations) is advised. No evidence links this domain to broader threat actor infrastructure, but its alignment with known phishing patterns warrants continued scrutiny.