gilded.top
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of gilded.top
Gilded.top is a domain with no clearly declared business category, and available data does not indicate a legitimate, established organization operating behind it. The name itself does not correspond to any widely recognized brand or public service, and the domain was registered relatively recently.
Based on the domain's structure, hosting characteristics, and the absence of meaningful categorization from web-classification providers, this site does not appear to represent a well-known company, government body, or media outlet. Instead, the profile of this domain - very short registration history, unusual nameserver naming, and lack of established reputation - is more consistent with a temporary or opportunistically created web presence rather than a long-standing service.
Safety Assessment for gilded.top
This domain was flagged by 13 out of 91 security engines at the time of this scan, with the majority of those detections specifically labeling the site as related to phishing activity, and a smaller number describing it more generally as malicious. This is a notably high proportion of engine consensus, which significantly raises concern about the intent of this website. A malware-scanning blacklist provider also listed the domain as carrying a generically-named malicious object, adding a further corroborating signal alongside the phishing classifications.
Other checks were more mixed: a major web-content blacklist reported the domain as clean, and DNS-based blocklist checks across five databases showed no listings. However, given the strength and consistency of the phishing-related detections across multiple independent security engines, these clean results do not outweigh the more serious findings. The domain is just over a year old, uses nameservers with unusual "domain-expired" naming conventions, and presents an invalid or missing SSL/TLS certificate, all of which are patterns commonly observed in low-effort or short-lived phishing infrastructure.
Based on these findings, this website may pose potential risks to visitors, particularly around credential theft or deceptive content designed to impersonate legitimate services. Visitors are advised to exercise caution and avoid submitting any personal or financial information to this site.
Technical Description
The site does not present a valid SSL/TLS certificate, meaning encrypted connections cannot be reliably verified and browsers may present security warnings to visitors. DNSSEC is unsigned, and the domain uses nameservers with an atypical "domain-expired" naming pattern, which is unusual for a normally operating website and may indicate a lapsed or repurposed hosting configuration. The site is hosted on infrastructure based in Los Angeles, United States, under a hosting provider identified as ZENLA-1, with the server operating on IP address 128.14.74.107.
The domain was registered in August 2025 through a registrar based overseas, giving it a history of just over one year at the time of this scan. This limited operating history, combined with the missing certificate and unusual DNS configuration, aligns with infrastructure patterns often seen in short-lived or disposable web properties rather than a mature, actively maintained business website.
Share your experience with this website. Was it safe? Did you encounter any issues?