goldodd[.]top

Analysis of the domain goldodd.top indicates a confirmed brand impersonation campaign targeting Ethereum users, classified as an elevated-risk gambling scam. The domain was registered on July 10, 2025, through Web Commerce Communications Limited and has since been taken offline. Infrastructure evidence reveals Cloudflare nameservers (tani.ns.cloudflare.com, trace.ns.cloudflare.com) and resolution to IP 57.129.97.29, hosted on OVH SAS (AS16276) in Germany. No SSL certificate was detected, increasing the risk of unencrypted credential interception.

The page title, 'GOLDODD | Enter the world of sport and stakes!', aligns with the Gambler Scam phishing kit classification, though the exact content and mechanics remain unanalyzed due to the site's offline status. Detection data shows the domain is flagged by four security vendors on VirusTotal and appears on one blocklist, including PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. While the domain is currently inactive, defenders should treat any prior or future resolution of this domain as hostile.

Historical WHOIS and hosting details provide actionable indicators for retrospective hunting, particularly for Ethereum-themed fraud campaigns leveraging gambling lures. No Safe Browsing or OTX data was provided, limiting cross-validation of the threat's broader impact. Organizations are advised to block the domain, IP, and associated nameservers in perimeter defenses and monitor for related infrastructure reuse.