golink[.]evn[.]my[.]id

Analysis as of July 29 2026 indicates that the domain golink.evn.my.id is currently classified as a generic phishing site with an elevated risk rating. The domain is listed as active in the threat feed and has been blocked by the PhishDestroy service. VirusTotal reports that 12 of 91 scanned security vendors flagged the domain, demonstrating a moderate level of consensus among detection engines.

Additionally, the domain appears on a single external security blocklist, confirming that at least one third‑party threat‑intelligence source has added it to its deny list. The available intelligence does not provide details on the underlying hosting infrastructure, ASN, geographic location, SSL certificate status, HTTP response codes, or page title. Consequently, the precise technical footprint of the site remains uncertain, and no further attributes such as brand impersonation or specific phishing kit have been identified.

Because the domain is actively serving content and has already triggered multiple vendor detections, defensive teams should treat any traffic to golink.evn.my.id as malicious. Recommended actions include adding the domain to network and endpoint URL filtering policies, ensuring that DNS‑based blocklists incorporate the observed blocklist entry, and monitoring outbound logs for connections to the domain. Continuous re‑scanning with VirusTotal and periodic checks against additional blocklists are advised to capture any changes in detection rates or new intelligence.