goldengatesholdings[.]com

Analysis of goldengatesholdings.com indicates this domain was established as a generic phishing site targeting financial services. The domain was registered on February 21, 2026, through MAT BAO CORPORATION and hosted on IP address 173.252.167.20, associated with AS19853 (OrangeHost) in the United States. The page title, 'Golden Gates Holdings | Your reliable banking partner,' suggests an attempt to impersonate a legitimate financial institution, though no specific brand imitation is confirmed from available data. No SSL certificate was detected, increasing the likelihood of unencrypted data transmission.

The domain appears on one security blocklist (PhishDestroy) and was flagged by 7 of 93 security vendors on VirusTotal, confirming detection by multiple threat intelligence sources. Infrastructure analysis reveals the use of nameservers ns1.orangehost.com and ns2.orangehost.com, consistent with the hosting provider. As of July 25, 2026, the domain is offline, though this does not eliminate the risk of reactivation or reuse of associated infrastructure. Defenders should treat this domain as part of a broader phishing campaign targeting banking credentials.

Network-level blocking of the IP (173.252.167.20) and monitoring for related domains registered through the same registrar or hosted on OrangeHost infrastructure is recommended. The absence of an SSL certificate and the domain's presence on a security blocklist further justify its classification as malicious. No evidence links this domain to a specific phishing kit or advanced threat actor, but the combination of hosting, registration details, and detection by security vendors supports its role in credential harvesting.