goldendigest[.]ltd

The domain goldendigest.ltd was registered on February 23, 2026 through Mesh Digital Limited and is currently hosted on a Cloudflare network (AS13335) with the IP address 188.114.96.3 located in the United States. The site presents an HTTP 200 response and serves a TLS certificate from Let’s Encrypt (R12), indicating that encryption is in place but offering no assurance of legitimacy. The page title "GOLDEN DIGEST – Safe investment with GOLDEN DIGEST" suggests an investment‑related lure, and the risk level has been classified as high. The domain is listed on three security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple anti‑phishing services have identified it as malicious.

On VirusTotal, ten of ninety‑three scanners flagged the domain, reinforcing the suspicion of abuse. Reputation scoring from Gridinsoft assigns a trust score of 1 out of 100, reflecting an extremely low confidence rating. The authoritative nameservers ns1.goldendigest.ltd and ns2.goldendigest.ltd resolve directly to the same Cloudflare IP, a pattern often observed in fast‑flux or disposable phishing infrastructures. While the exact content of the landing page has not been captured, the available metadata indicates a classic credential‑harvesting or investment‑fraud operation.

Defenders should block the domain at perimeter firewalls, update URL filtering lists, and monitor for outbound connections to the associated IP address. Continuous re‑scanning of the host on multi‑engine platforms is advised, as threat actors may modify payloads while retaining the same infrastructure. Incident response teams should also consider correlating any user reports of unsolicited communications referencing "Golden Digest" with this indicator to identify potential compromise attempts.