infogold[.]net

PhishDestroy identifies a live credential theft operation hosted at infogold.net, a domain registered on January 13, 2026 through Cloudflare, Inc. and resolving to IP 104.21.34.241. The domain currently shows 0/95 detections on VirusTotal and leverages a Google Trust Services SSL certificate to appear legitimate. This infrastructure supports a generic phishing campaign designed to harvest user credentials under false pretenses, with no brand impersonation currently confirmed but active threat activity observed. This domain poses a direct risk to users who may enter sensitive information under the assumption of legitimacy. The absence of VirusTotal detections (0/95) indicates this campaign has evaded broad detection layers, increasing the likelihood of successful compromise for visitors. The domain’s recent creation date (January 13, 2026) and use of Cloudflare’s infrastructure suggest a deliberate effort to appear benign while facilitating malicious activity. The presence of a valid SSL certificate further lowers user suspicion, making it a credible threat vector for credential theft. Users who visited infogold.net should immediately check for unauthorized account access, reset passwords on all related services, and scan devices for malware. Avoid entering any credentials or personal data on this domain. If interaction occurred, monitor financial accounts for suspicious transactions and report any unauthorized activity to relevant service providers. This domain is under active investigation and should be considered hostile until further notice.