gosolcoin[.]digital

The domain gosolcoin.digital was registered on May 25 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently flagged as an active high‑risk phishing infrastructure. The site returns an HTTP 403 response, indicating that direct content retrieval is blocked, and it is protected by a Let’s Encrypt certificate (identifier YE2). DNS resolution points to 104.21.93.30, a Cloudflare‑owned address located in Canada. The authoritative nameservers are maya.ns.cloudflare.com and amos.ns.cloudflare.com, confirming that the domain is fully proxied behind Cloudflare’s network. This arrangement masks the origin server and provides the attacker with DDoS protection and flexible IP reassignment. Open‑source intelligence shows the domain appears in ten AlienVault OTX pulses and is listed on three public blocklists. It has also been deliberately blocked by multiple sink‑hole feeds, including PhishDestroy, MetaMask, and SEAL, underscoring that the indicator is already shared among defensive communities. No detections were reported on VirusTotal at the time of analysis, but the lack of detections does not imply benign intent. Defenders should add gosolcoin.digital to network‑level deny lists and monitor DNS queries for resolution attempts. Because the site is hosted behind Cloudflare, traditional IP‑based blocking may be ineffective; instead, URL filtering or TLS inspection should be employed where policy permits. Continuous observation of the associated IP address and any newly registered subdomains is recommended to detect potential escalation or credential‑stealing payloads.