goalglide[.]ru[.]com

The domain goalglide.ru.com was flagged by the PhishDestroy blocklist and is currently listed as offline. The site presented a 404 HTTP status at the time of retrieval, indicating that the web resource is no longer reachable. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate in use is issued by Google Trust Services under the WE1 label, confirming that TLS is terminated by Cloudflare’s edge network. Registrar information shows the domain was registered through Sav.com, LLC on 21 February 2026.

The authoritative name servers are ns1.centralnic.net through ns4.centralnic.net. Technical fingerprinting reveals a WordPress stack backed by MySQL and PHP, with client‑side libraries including reCAPTCHA, jQuery, and Cloudflare Browser Insights, and the server advertises HTTP/3 support. The page title captured before the site went offline reads “Hitclub - Địa Chỉ Chơi Game Đổi Thưởng Hit Club Web Chính Chủ 2026”, which references a gaming‑related brand but does not provide direct evidence of the phishing payload. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single external blocklist.

VirusTotal analysis shows six of ninety‑three security vendors flagged the domain, reinforcing the malicious classification. Given the combination of a confirmed blocklist entry, low trust score, multiple vendor detections, and the presence of a generic phishing indicator, defenders should treat goalglide.ru.com as a high‑confidence phishing indicator. Recommended actions include adding the domain and its resolving IP to network‑level deny lists, monitoring for any re‑appearance of content, and ensuring that email gateways block messages containing references to the captured page title. Ongoing observation of the Cloudflare‑hosted IP for sudden changes in service is advisable, as the infrastructure could be repurposed for future campaigns.