barcelonagold-ai[.]net

barcelonagold-ai.net was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 21 February 2026. The domain resolves to the Cloudflare address 172.67.209.225 (AS13335, United States) and uses the Cloudflare nameservers coleman.ns.cloudflare.com and shaz.ns.cloudflare.com. No TLS certificate is presented, indicating the site operates without HTTPS. The page title returned by the web server is “Barcelona Gold - Plataforma Oficial | Trading IA 2026”, which aligns with the declared scam type of brand impersonation targeting the “base” brand. Google Safe Browsing classifies the domain as social engineering, and Gridinsoft assigns a trust score of 0 / 100.

VirusTotal analysis shows that 14 of 93 security vendors have flagged the domain, confirming its malicious reputation. The domain appears on three external blocklists and has been added to the blocklists of PhishDestroy, MetaMask, and SEAL. Current status is offline, suggesting the hosting has been taken down or the site is no longer serving content. Analysis indicates that the infrastructure relies on Cloudflare’s CDN, a common choice for fast‑flux or hide‑in‑plain‑sight campaigns. The lack of an SSL certificate reduces the likelihood of credential harvesting via encrypted channels, but the social‑engineering classification and brand‑impersonation label imply that the site likely attempted to lure victims with a fraudulent trading platform narrative.

The exact content of the landing page has not been captured, so the presence of credential‑capture forms or malicious downloads remains uncertain. Defenders should continue to block the domain at perimeter firewalls and DNS resolvers, ensure that any existing client‑side blocklists (including PhishDestroy, MetaMask, SEAL) remain active, and monitor for any future re‑registration attempts of similar domains. Because the IP address belongs to a shared Cloudflare pool, threat hunting should focus on traffic patterns to 172.67.209.