guildoauth[.]net

This domain, guildoauth.net, is classified as a generic phishing threat with an elevated risk level. Analysis indicates it was designed to deceive users into providing sensitive credentials or authentication tokens. No specific brand or drainer kit was identified in the available data, but the domain's structure and behavior align with credential harvesting campaigns.

Technical indicators show a VirusTotal detection rate of 3/95 security vendors. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to IP address 172.67.178.41. Infrastructure analysis reveals the use of Cloudflare and HTTP/3 technologies, with an SSL certificate issued by Google Trust Services. The domain appears on four security blocklists and is blocked by multiple anti-phishing platforms, including MetaMask and ScamSniffer. The page title displayed was 'guildoauth.net | 523: Origin is unreachable,' indicating the origin server was unreachable at the time of analysis.

Current status indicates the domain has been taken offline. Response actions include blocking by security vendors and blocklists. Remaining risk is low as the domain is offline, but users should remain cautious of similar domains and avoid entering credentials on untrusted sites. Safety recommendations include verifying domain authenticity before login and using multi-factor authentication where possible.