Aller au rapport de sécurité
Sécurité des domaines et renseignements sur les menaces
gohigher.digital favicon

gohigher.digital

“Invest Mold”

Bureau d’enregistrement
Dynadot
Resolved IP
77.90.185.84
Registered
28/12/2025
PhishDestroy assessment Critique
First observed Jul 20, 2026 13:07 UTC · PhishDestroy
Détections VirusTotal : 14/91 Spamhaus DBL: DBL_SPAM URLQuery threat systems: 2 alerts Type d'arnaque : Credential Phishing
OTX: 4 refs 20/07/2026 1 Report Sent
API
Ce domaine a été signalé comme malveillant
Moteurs de sécurité signalant une détection : 14. Faites preuve d’une extrême prudence – ne saisissez pas d’informations d’identification ou d’informations personnelles.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is abuse@dynadot.com. The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
3 months
Reports sent
1
Latest case ID
PD-20260720-0BBB49
Current status
Observed active at latest stored check
VirusTotal
engine detections
Google Safe Browsing
URLQuery
threat alerts
OTX
community references
Page captures
open gallery
Domain age
Reports sent
view timeline
Résumé du rapport

Vol d’identifiants: gohigher.digital — Non vérifié. Résumé des preuves: VirusTotal 14/91 (alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker)…

L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.

Source evidenceVirusTotal 14 / 91 · OTX 4 references 8 sources

Spamhaus DBL

DBL_SPAM

Results reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.

Renseignements sur la sécurité réseau
Threat Detection Systems 2 alerts
Detection System Indicator Verdict Alert
OpenDNS gohigher.digital phishing Phishing Block
DNS4EU gohigher.digital malicious Sinkholed

Analysis

Critique
VirusTotal
14 / 91
OTX
4 community refs
Page captures
3

PhishDestroy threat report

On July 20, 2026, the domain gohigher.digital is under investigation for potential phishing activities. The domain was registered on December 28, 2025, through Dynadot Inc and is currently active. It resolves to the IP address 77.90.185.84, which is managed by Cloudflare nameservers abby.ns.cloudflare.com and anuj.ns.cloudflare.com. The domain appears on one security blocklist, specifically PhishDestroy, indicating a potential risk. While the domain has been scanned by 95 vendors on VirusTotal, none of these vendors currently flag it as malicious; however, this does not guarantee its safety, as the absence of detections is not proof of benign intent. The exact content of the website has not yet been analyzed, and it is unclear what specific entity or service the site may be impersonating. Infrastructure analysis reveals that the domain is hosted on a Cloudflare-managed IP, which could be indicative of the use of a common hosting service for malicious activities. Defenders should exercise caution and monitor the domain for any changes in its status or content. Additionally, it is recommended to block or restrict access to this domain until further analysis confirms its safety. Organizations should also educate users about the risks of phishing and encourage them to verify the authenticity of any login pages or requests for sensitive information.

Collected source details

Stored page, network and scanner observations, grouped by source and observation time.

URLScan · 2026-07-20T13:07:04Z

Observé: · Retrieved:

Uuid
019f7fa2-f344-778f-b2a8-12778f4620a5
Final url
https://gohigher.digital/
Statut
200
Ip
77.90.185.84
Contacted domains
[
    "fonts.gstatic.com",
    "cdnjs.cloudflare.com",
    "get.geojs.io",
    "fonts.googleapis.com",
    "code.jquery.com"
]
Contacted IP addresses
[
    "172.67.70.233",
    "142.251.163.94",
    "142.251.163.95",
    "104.17.24.14",
    "151.101.129.155",
    "77.90.185.84"
]
Asns
[
    "13335",
    "15169",
    "54113",
    "213790"
]
Countries
[
    "US",
    "IR"
]
Document hash
df43425847ebf5453dac60de56efe09b9c00d83e1c3ee32b1eba4ec7d7433ef5
Script hashes
[
    "dec793c9fe899f85abd27a89224a0ef09c67a4c7cfb1ae8b810020722d324a2a"
]
Globals
[
    "$",
    "jQuery",
    "_0x40a5",
    "initCurrentYear",
    "_0x27b7",
    "getRandomProfit",
    "updateProfits",
    "updateCompanyProfit",
    "formatProfit",
    "initStartCounter",
    "startCounter",
    "openModals",
    "generateUserId",
    "changeTextModal",
    "showLeadForm",
    "initApp",
    "_0x1b5c",
    "_0x37ac",
    "intlTelInputGlobals",
    "intlTelInput",
    "intlTelInputUtils",
    "btn",
    "errorMap",
    "countryCode",
    "input",
    "lang",
    "x",
    "timeZone",
    "_0x1352b7",
    "year",
    "greenButton",
    "modalLead",
    "blackBtn",
    "form",
    "leadTitle",
    "leadSubtitle",
    "counter",
    "maxProgressValue",
    "previousProfits",
    "counterStarted"
]
Cookies
[
    "_subid",
    "7a069",
    "_token"
]
Tls
{
    "san": [
        "gohigher.digital"
    ],
    "cipher": "AES_256_GCM",
    "issuer": "YE1",
    "subject": "gohigher.digital",
    "protocol": "TLS 1.2",
    "valid_to": "2026-08-31T10:37:31Z",
    "valid_from": "2026-06-02T10:37:32Z"
}
Domain age days
203
Apex age days
203
Tls age days
48
Tls valid days
89
Requests
36
Provider verdicts
{
    "engines": {
        "tags": [
            "urlscan-ml",
            "urlscan-ml-60c5e22"
        ],
        "score": 96,
        "malicious": true
    },
    "overall": {
        "score": 0,
        "malicious": false
    }
}
HTTP headers
{
    "server": "nginx",
    "content-type": "text/html; charset=utf-8",
    "x-powered-by": "PHP/7.4.33"
}
Cloudflare Radar · 2026-07-20T13:08:41Z

Observé: · Retrieved:

Uuid
b6cd87a5-116f-47d3-8650-6029f19a095b
Final url
https://gohigher.digital/
Statut
200
History
[
    {
        "url": "https://gohigher.digital/",
        "status": 200
    }
]
DOM structure hash
f87eb198ab80bca277031c8a6534e46f16f6821fe51117494bb09d988f25fef3
Document hash
321bec82b2ed6919e672252170baa70ec377eea1599259a4cfb46458cb51b221
Radar rank
{
    "bucket": ">200000"
}
DNS records
[
    {
        "name": "gohigher.digital",
        "type": "A",
        "value": "77.90.185.84"
    }
]
Dnssec valid
false
Ip
77.90.185.84
Registration record
{
    "registrar": "Dynadot Inc",
    "created": "2025-12-28T16:18:37Z",
    "updated": "2026-01-05T10:17:33Z",
    "expires": "2026-12-28T16:18:37Z",
    "nameservers": [
        "abby.ns.cloudflare.com",
        "anuj.ns.cloudflare.com"
    ]
}
Blocklist matchesPhishDestroy 1
PhishDestroy PhishDestroy list View source

Capture enregistrée · 3 captures

Observed page title
Invest Mold
Certificat TLS
Émis par Let's Encrypt · stored validity ends in 41 days

Domain details

Domaine
URLScan verdict Analyse terminée score 0 report ↗
Réputation de l’IP abuse score 100/100 192 reports DDoS AttackPhishingPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSH checked 18/10/2026
OTX tags 2026-07activeall-domainsblocklistcontentcryptodomainesdrainerfraudlivemonthlyphishdestroyphishingscam
Bureau d’enregistrement Dynadot (Unknown)
EnregistrementCréé 28/12/2025 (297d) — Expires 28/12/2026
Détails techniquesProvenance & timestamps
Première détection20/07/2026
DOM Analysisanalyzed 20/07/2026score 98/100
Submitted URLhttps://gohigher.digital/
ID du dossier
ICANN OVERSIGHT

Contexte de l’accréditation et du RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Rien n’est envoyé automatiquement.

Network & certificates

Stored technical evidence

Network & DNS

Resolved IP
77.90.185.84
Network ASN
AS213790
Organization
Limited Network LTD
Observed location
Augsburg, DE
Server header
nginx

Serveurs de noms 2

  • abby.ns.cloudflare.com
  • anuj.ns.cloudflare.com

Location describes the IP network.

Certificat TLS

Issuer
Let's Encrypt
Valid from
2026-06-02 10:37:32
Valid until
2026-08-31 10:37:31
Hostname coverage
Stored certificate dates valid
Validity
Stored certificate expired
Collection time
2026-10-21 07:04:00 UTC
Collection source
PhishDestroy collector
Certificate fingerprint33fc5c6daf8a86752801bb6c1b535494f34160580d9a99d3ea1db4dcac45a7a2
Certificate names · 1 SANs
  • gohigher.digital

Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.

Technologies · 6 identified
Detected via Cloudflare Radar · Wappalyzer engine
Signaler ce domaine Envoyez des éléments de preuve et contribuez à protéger les autres

Analyse VirusTotal

14 / Les fournisseurs de sécurité 91 ont signalé ce domaine
View on VT
Last analyzed First positive detection Previous stored snapshot: 15 detections
alphaMountain.ai
BitDefender
CRDF
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Lionic
SOCRadar
Sophos
VIPRE
Webroot
Yandex Safebrowsing

Preuves archivées

Wayback Machine Snapshot
Un instantané historique est disponible pour l’examen des preuves
View Archive
Analyse des performances du site

Google PageSpeed Insights — mobile performance audit of gohigher.digital · checked Jul 20, 2026

65
Needs Work
Performance
FCP
3.25s
First Contentful Paint
LCP
10.74s
Largest Contentful Paint
CLS
0.063
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
5.08s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Registration & observation details1

Availability observations

Last reachable observation

An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.

Check for cloaking

Compare what a browser and a crawler receive, and check for Keitaro traffic routing.

gohigher.digital
Résultat enregistré
Inaccessible

Recorded activity

6 entries
  1. AlienVault OTX

    4 community references

    View source
  2. VirusTotal

    14/91 engine detections

    View source
  3. Abuse report sent

    PD-20260720-0BBB49

    abuse@dynadot.com
  4. Google Safe Browsing

    No threat flag

    View source
  5. Added to PhishDestroy

    gohigher.digital

    View source
  6. URLScan

    Page captured

    View source

Données factuelles et rapports externes

Instantané des preuves transmises
Sent: Ledger records: 1 Case ID: PD-20260720-0BBB49 Recipient: abuse@dynadot.com
Page title stored with report: Invest Mold
Notice text archived (291 chars)
Abuse notice text as sent to the provider
Registrar: Dynadot LLC / Dynadot Inc (United States)
Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Référencement naturel et nom de domaine
Analyse approfondie
Help & reporting

Ce site vous a-t-il affecté ?

7 evidence signal groups linked 1 stored notification records Non vérifié
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.

Official reporting routes

Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Les criminels peuvent recontacter leurs victimes tout en se faisant passer pour des enquêteurs, des avocats ou des agents de recouvrement. Ne payez pas de frais initiaux et ne partagez pas vos informations d'identification. En savoir plus sur la fraude liée aux aides à la reprise →

Signalez-le à vos autorités locales

Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.

Annuaire de 97 pays

Template-based draft · optional AI wording assistance requires separate consent

Brouillon assisté par l'IA : les détails de l'incident sont traités par le fournisseur d'IA · Examinez-le et soumettez-le vous-même
After a phishing incident

Recommandations et conseils à l'intention des victimes

Choose the steps that match what you shared. Keep a copy of this report alongside your own records.

Que dois-je faire tout de suite ?

Urgent

Stop using the suspicious site. Open the real service through its official app or an address you already trust.

  • Modifier tous les mots de passe — e-mail, comptes Exchange, tout ce qui utilise le même mot de passe
  • Activer l'authentification à deux facteurs (2FA) en utilisant une application d'authentification (et non par SMS). Désactivez la récupération par SMS
  • Cartes « Freeze » si vous avez saisi vos coordonnées bancaires sur le site de hameçonnage

Quelles informations dois-je rassembler pour mon rapport ?

Directives du FBI

Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗

  • Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
  • Dates et horaires exacts — de chaque transaction et du premier contact avec l'escroc
  • Captures d'écran — sites web frauduleux, messages de chat, e-mails, transactions via des portefeuilles numériques, réseaux sociaux
  • Toutes les URL et tous les noms de domaine utilisés par l'escroc (notamment gohigher.digital)
  • Communications — les e-mails, SMS, numéros de téléphone et noms d'utilisateur utilisés par l'escroc

Même si vous ne disposez pas de tous les détails — déposer quand même une plainte. Même des informations partielles peuvent aider les enquêtes.

À qui dois-je signaler cette arnaque ?

  • FBI IC3 — Centre de signalement des délits sur Internet (système fédéral américain de signalement)
  • Europol — Rapports sur la cybercriminalité en Europe (UE)
  • Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
  • Police locale — permet de consigner officiellement la situation, même s’ils ne peuvent pas agir immédiatement

A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.

How do phishing scams typically work?

  • Faux sites web — des clones identiques au pixel près de sites légitimes, dont les noms de domaine ont été légèrement modifiés
  • Découpe du porc — une relation de confiance établie au fil des semaines via Telegram, WhatsApp ou des applications de rencontre, puis une escroquerie financière
  • Arnaques liées au recouvrement — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
  • Escroqueries basées sur l'IA — les « deepfakes », le hameçonnage automatisé et les sites générés par l'IA, qui rendent la fraude plus difficile à détecter

Comment puis-je me protéger à l'avenir ?

  • Ajouter les sites officiels à vos favoris — Ne cliquez jamais sur les liens contenus dans les e-mails, les messages privés ou les publicités
  • Vérifier les noms de domaine — vérifier si PhishDestroy avant d'entrer en contact. Vérifiez le protocole HTTPS, l'orthographe et l'ancienneté du domaine
  • « Trop beau pour être vrai » = arnaque — des rendements garantis, des témoignages de célébrités, des délais serrés

Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams

Restez informés, restez en sécurité

Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif

Flux d'alertes en temps réel Contester cette annonce
About this reportSources, observation dates and corrections

This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.

The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.

A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.

Embed this reportA compact widget with a link to the evidence
HTML · IFRAME

Intégrer ce rapport

Partagez ces informations sur les menaces sur votre site web ou votre blog

embed.html
<iframe
  src="https://phishdestroy.io/fr/embed/domain/gohigher.digital"
  title="PhishDestroy threat report for gohigher.digital"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>