goldbenchclub[.]com

Analysis of goldbenchclub.com indicates a high-risk phishing domain targeting digital banking users. The domain, registered on February 21, 2026, through Cosmotown, Inc., currently resolves to IP 163.61.188.5 (AS153568, US-based). The site returns an HTTP 200 status and presents a page title suggesting a focus on digital banking innovation, though the exact content and targeting methodology remain unconfirmed. Infrastructure reveals the use of PHP, Bootstrap, LiteSpeed, and jQuery, alongside HTTP/3 for potential performance obfuscation. SSL certification is provided by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. Goldbenchclub.com appears on one security blocklist (PhishDestroy) and is flagged by 10 of 93 security vendors on VirusTotal, confirming active detection. Nameservers are hosted under lytehosting.com, a provider previously associated with abusive domains. The domain's creation date (5 months old at time of report) aligns with typical phishing lifecycle patterns, though no specific brand impersonation or scam subtype (e.g., credential harvesting, fraudulent transactions) is confirmed from available data. Defenders should treat this domain as malicious and block resolution at DNS or network level. Given the HTTP 200 response and active SSL certificate, passive monitoring may not suffice; active takedown requests to the registrar (Cosmotown, Inc.) and hosting provider (NEW DHAKA HARDWARE) are recommended. Further analysis of the site's content and backend infrastructure is required to determine precise attack vectors and potential victim impact.