pc[.]goldmgt[.]net

The domain pc.goldmgt.net was created on May 15, 2025 and registered through Gname.com Pte. Ltd. Its authoritative name servers are etta.ns.cloudflare.com and isaac.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s network. DNS resolution points to IP address 104.21.26.48, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Technical fingerprinting shows the site leveraged Ant Design and Vue.js frameworks and was served over HTTP/3, consistent with a modern web stack. The page title returned by the server is "Goldonline," but no further content analysis is available.

VirusTotal scans recorded that two of ninety‑four security vendors flagged the domain, confirming a minority of detections. Independent blocklists, including PhishDestroy, MetaMask, and SEAL, have listed the domain, and it appears on three additional security blocklists. As of the report date, July 25, 2026, the site is reported offline, suggesting that the phishing infrastructure may be temporarily dormant or taken down.

Defenders should continue to block the domain at the DNS layer, enforce sinkholing of the associated IP address, and monitor the Cloudflare‑hosted IP range for any re‑activation of the site. Because the underlying hosting provider is a shared CDN service, future malicious payloads could be deployed from the same IP address; therefore, threat‑intel feeds should be consulted regularly for new indicators tied to 104.21.26.48. Organizations should also update web‑gateway and endpoint protection rules to include the known blocklist entries and consider adding the domain to URL filtering policies to prevent accidental user access should the site become reachable again.