kikgolds[.]com

The domain kikgolds.com was registered on September 25 2025 through OwnRegistrar, Inc. and currently resolves to the IPv4 address 192.3.190.186, which is hosted by AS36352 (HostPapa) in the United States. The site presents the page title “Kik Gold - Home” but no SSL certificate is offered, indicating that the service is delivered over plain HTTP. Threat intelligence sources classify the activity as a brand‑impersonation campaign targeting Google. The classification is corroborated by the presence of the domain on a single security blocklist and its inclusion in one AlienVault OTX pulse.

Independent reputation services assign a Gridinsoft trust score of 0 out of 100, and the domain is actively blocked by the PhishDestroy filtering service. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain, reinforcing the suspicion of malicious intent. The domain is listed as offline at the time of this report, but the underlying infrastructure – the IP address and the associated hosting provider – remains reachable and may be reused for future campaigns. At present, no additional artefacts such as malware payloads, credential‑stealing forms, or HTTPS redirects have been observed, and the exact content of the site beyond the page title has not been publicly disclosed.

Defenders should add kikgolds.com to DNS‑based blocklists, enforce network‑level denial of the resolved IP address, and monitor for any new sub‑domains or similar domains registered by the same registrar. Continuous re‑evaluation of the IP reputation and periodic rescanning with multi‑engine services are recommended to detect any resurgence of activity. Because the domain explicitly mimics a Google brand, any unsolicited communications referencing Google that direct users to this host should be treated as malicious.