goldkong-sz[.]com

Analysis indicates that goldkong-sz.com operates as an active generic phishing domain with a creation date of November 12 2020 through registrar Gname.com Pte. Ltd. The domain resolves to IP address 23.160.193.2 located in the United States under AS397270 NetInformatik Inc. Nameserver configuration points to a.share-dns.com a10.share-dns.com b.share-dns.net and b10.share-dns.net while the associated SSL certificate lists an internal issuer of internal.local. Multiple intelligence sources record the domain in 16 AlienVault OTX pulses and flag detections by 16 out of 95 VirusTotal vendors. The domain appears on two security blocklists maintained by PhishDestroy and PhishingDB. HTTP response returns status code 500 and the Gridinsoft trust score stands at 0 out of 100 confirming high risk classification under generic phishing threat type. Current status remains active as of the July 12 2026 report date.

Infrastructure details establish long-term persistence since late 2020 alongside consistent external detections that align with known malicious patterns. The internal SSL certificate deviates from standard public issuance practices often observed in legitimate services. Blocklist presence and pulse associations provide concrete evidence of prior malicious use without reliance on unverified indicators. Exact content hosted by the domain has not undergone direct analysis so the specific target or impersonation method remains undetermined from available data.

Defenders should incorporate the IP address 23.160.193.2 and domain goldkong-sz.com into network block rules and DNS sinkholing configurations. Monitoring for connections to the listed nameservers can assist in identifying related infrastructure. Regular review of threat intelligence feeds for updates on this domain supports ongoing containment efforts. Organizations are advised to correlate internal logs against these indicators to detect any attempted access or credential exposure.