guildhome[.]org

Analysis of guildhome.org indicates a high-risk phishing domain active as of July 23, 2026. The domain was registered on November 6, 2025, through NiceNIC International Group Co., Limited, and currently resolves to IP 172.67.210.128, hosted on Cloudflare's network (AS13335). Nameservers braden.ns.cloudflare.com and dana.ns.cloudflare.com further confirm Cloudflare infrastructure. The domain is blocked by four security vendors: PhishDestroy, MetaMask, ScamSniffer, and SEAL, suggesting malicious intent targeting users or digital assets.

Despite returning an HTTP 200 status, the page title displays 'guildhome.org | 522: Connection timed out,' which may indicate a misconfigured or intentionally obscured phishing page. Seven of 95 security vendors on VirusTotal flag the domain, reinforcing its suspicious classification. Technical indicators reveal the use of Cloudflare services and HTTP/3, common among threat actors to obfuscate origin servers and evade detection. The SSL certificate, issued by Google Trust Services (WE1), is valid but does not mitigate the domain's malicious classification.

No specific brand or scam type is identified in the available data, and the exact content or target of the phishing scheme remains unconfirmed. Defenders should treat this domain as active and high-risk, blocking resolution at the DNS level and monitoring for related IOCs. Further analysis of network traffic or historical captures may clarify the domain's intended use.