pudgy-goldenticket[.]xyz

This domain, pudgy-goldenticket.xyz, was registered on 21 February 2026 and is currently listed as offline. Early investigative scans show that two of ninety‑three VirusTotal scanners flagged the domain, indicating the presence of malicious components. The domain received a Gridinsoft trust score of 0 out of 100, confirming a lack of reputation. Defensive feeds have already taken action: PhishDestroy has blocked the host, and it appears on a single external security blocklist.

The limited detection footprint suggests a short‑lived or rapidly takedown campaign, but the existence of any detections demonstrates that threat actors employed the domain for a phishing operation. No additional data such as hosting IP, registrar information, SSL certificate details, or page title have been released publicly, leaving those elements unverified at this time. Analysts should continue to monitor passive DNS and certificate transparency logs for any re‑registration or reuse of the domain name.

Organizations employing URL filtering should ensure that pudgy‑goldenticket.xyz is added to deny lists, and incident response teams should treat any traffic to this domain as malicious. The elevated risk rating reflects the confirmed malicious detections and the zero‑trust score, despite the current offline state. Ongoing collaboration with blocklist operators and sandbox services is recommended to capture any future variants that may reuse the same brand‑agnostic naming pattern.