gold-salamander-743912[.]hostingersite[.]com

Analysis of the domain gold-salamander-743912.hostingersite.com confirms its classification as an active phishing site targeting Google brand credentials. The domain was registered on March 4, 2026, through HOSTINGER operations, UAB, and currently resolves to the IP address 2.57.91.69. Security telemetry indicates the domain is flagged by 12 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100, reinforcing its malicious classification. Google Safe Browsing has explicitly labeled the domain under the SOCIAL_ENGINEERING category, a designation typically applied to sites designed to deceive users into divulging sensitive information. Infrastructure analysis reveals the domain is hosted on Hostinger’s platform, utilizing Hostinger’s content delivery network (CDN). The SSL certificate is issued by DigiCert Inc, a detail that may lend superficial legitimacy but is consistent with observed tactics in phishing campaigns to evade browser warnings. The page title, matching the domain name itself, provides no additional context regarding the specific content or attack vector, though the brand impersonation targeting Google is explicitly documented in threat intelligence feeds. The domain appears on at least one security blocklist, further corroborating its malicious status. While the exact phishing kit or payload remains unconfirmed, the combination of brand impersonation, low trust scores, and security vendor detections leaves little ambiguity regarding the domain’s intent. Defenders are advised to treat this domain as hostile and implement blocking measures at the DNS or network level. Given its active status as of July 12, 2026, and the lack of any legitimate use case, organizations should prioritize monitoring for connections to 2.57.91.69 or any subdomains under hostingersite.com associated with this campaign. Additional scrutiny of Hostinger-hosted domains with similar naming conventions may uncover related infrastructure.