golink[.]id

This domain, golink.id, is flagged as a generic phishing domain impersonating a digital experience platform. It poses a significant risk by attempting to trick users into providing sensitive information such as login credentials, financial details, or personal data. The primary threat is the potential for credential theft and subsequent unauthorized access to user accounts.

Analysis indicates that 15 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain was registered through PT Cloud Hosting Indonesia on May 04, 2024. It appears on 1 security blocklist and is currently blocked by the PhishDestroy service. The domain resolves to the IP address 172.67.209.135 and uses an SSL certificate issued by Google Trust Services, which may lend it an appearance of legitimacy. Despite these efforts, the domain has been taken offline, suggesting it may have been part of a temporary or short-lived campaign.

If users have visited golink.id, they should immediately change any passwords or sensitive information that may have been entered on the site. It is recommended to monitor financial accounts and credit reports for any unusual activity. Users should also run a full system scan using their antivirus software to ensure no malware was installed. Additionally, users should report the incident to their organization's IT security team and any relevant authorities to mitigate potential damage and prevent further incidents.