vetragold[.]com

Analysis indicates that vetragold.com was registered on 13 January 2025 through Sav.com, LLC and is currently served by the controlpanelnet.com nameserver pair ns9.controlpanelnet.com and ns10.controlpanelnet.com. DNS resolution points the domain to the IPv4 address 13.140.180.106, which is hosted in a cloud environment typically associated with public‑cloud providers. The domain appears on a single security blocklist and is flagged by the PhishDestroy feed, confirming that it is being actively used in a phishing campaign. VirusTotal records show that the domain was scanned by 91 anti‑malware vendors; none of the vendors returned a positive classification at the time of scanning, which does not imply that the domain is safe.

No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, or trust‑score data have been released for this host, and the page title or any landing‑page content has not been publicly disclosed. The lack of additional contextual evidence limits the ability to attribute a specific lure or target brand beyond the generic classification of 'generic phishing'. Defenders should therefore treat vetragold.com as a high‑confidence malicious indicator.

Recommended actions include adding the domain and its associated IP address to outbound filtering rules, blocking DNS resolution for the domain, and incorporating the indicator into intrusion‑detection signatures. Continuous monitoring of the IP reputation, any future VirusTotal updates, and additional blocklist feeds is advised to capture potential changes in the threat profile. Organizations that employ email gateways or web proxies should ensure that traffic to vetragold.com is denied and that any credential‑submission attempts are logged for further investigation.