gold-idn[.]com

Analysis of www.gold-idn.com indicates that the domain was created on 23 February 2026 and is currently hosted on Cloudflare’s network (ASN 13335, United States). The authoritative nameservers are armfazh.ns.cloudflare.com and carla.ns.cloudflare.com, and the domain resolves to IP address 172.67.171.28. The site presented a page title of "GOLDEN DOMAIN" but no SSL certificate was observed, implying an HTTP‑only service at the time of capture.

Registration was performed through Dominet (HK) Limited, a registrar based in Hong Kong. The domain has been taken offline and is listed as blocked by the PhishDestroy mitigation service, and it appears on one external security blocklist. VirusTotal records show that the domain was scanned by 93 AV engines without any detections, but the absence of detections does not constitute a safety guarantee.

No additional intelligence such as Safe Browsing, OTX, or brand‑specific targeting was supplied, leaving the precise phishing campaign context unknown. Defenders should add www.gold-idn.com to internal URL filtering and DNS block policies, monitor the associated IP (172.67.171.28) for any future activity, and watch for re‑registration or new hostnames under the same Cloudflare ASN. Continuous verification of the domain’s status is advised, as offline phishing sites often reappear under different subdomains or with altered landing pages.