goldenshipxpress[.]com

The domain goldenshipxpress.com was registered on 21 February 2026 through NameSilo, LLC and is currently hosted on IP 198.12.80.250, belonging to AS36352 operated by HostPapa in the United States. Authoritative name servers are ns1.ns306.parklogic.com and ns2.ns306.parklogic.com, and the domain presents an SSL certificate identified as R13. HTTP requests return status 200 and the page title is "GoldenShip Express – GoldenShip Express", indicating a surface‑level brand reference but the page content has not been publicly analyzed. The domain is classified as a crypto‑related scam and is flagged for brand impersonation across multiple targets. Reputation services assign a Gridinsoft trust score of 0/100 and VirusTotal records show detections by 10 of 93 scanning engines. The domain appears on one external blocklist and is listed as blocked by PhishDestroy. MX records point to goldenshipxpress.com itself, suggesting potential use of the domain for email phishing. Current intelligence indicates active exploitation, but the exact phishing workflow, victim lure, and credential collection mechanisms remain unknown. Defenders should add the domain and its associated IP address to deny‑list rules, monitor DNS queries for the listed name servers, and enforce SSL inspection to detect any malicious payloads. Ongoing observation of traffic toward the HostPapa AS and periodic re‑scans with malware sandboxes are recommended to capture any evolving payloads.