xn--ve-6kca[.]xn--mppshbrgh-0yhcd7oie7a980aha3153kdaj[.]whitegold[.]co[.]com

Analysis of the domain xn--ve-6kca.xn--mppshbrgh-0yhcd7oie7a980aha3153kdaj.whitegold.co.com shows that it was registered on 21 February 2026 and is presently taken offline. DNS resolution points to the IPv6 address 2606:4700:20::681a:aa1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site was blocked by PhishDestroy and appears on one additional security blocklist, indicating that at least one feed has flagged the domain for malicious activity.

The SSL certificate associated with the host received an E6 rating, suggesting a low trust level. VirusTotal records indicate that the domain was submitted to 93 scanning engines; none of the engines have raised a detection at the time of analysis. The single blocklist entry categorizes the domain as a generic phishing vector, but no page title, brand target, or phishing kit information is available, leaving the exact content of the landing page unknown.

Defenders should continue to monitor the IP address for any re‑hosting attempts, enforce blocklist rules that include the domain and its resolved IP, and consider adding the domain to internal deny lists. Because the domain is offline, active mitigation is not required, but future reuse of the Cloudflare‑hosted IP by related campaigns cannot be excluded.