goldinveste[.]com

The domain goldinveste.com was registered through NameSilo, LLC on February 21, 2026 and is configured to use the nameservers ns1.spantrix.com and ns2.spantrix.com. DNS resolution points to IP address 172.93.120.110, which belongs to AS393960 Host4Geeks LLC and is located in the United States. No SSL certificate was observed, indicating that the site operated without HTTPS. The page title returned by the server is "Goldinvest," matching the reported investment‑scam classification.

VirusTotal scans have flagged the domain by five of ninety‑five security vendors, and the domain appears on three public blocklists. Additional blocking by PhishDestroy, MetaMask, and SEAL reinforces its malicious reputation. Gridinsoft assigns a trust score of 1 out of 100, reflecting an extremely low confidence level. The site is currently taken offline, but historical evidence points to a brand‑impersonation campaign that may have targeted multiple brands under the guise of a financial service.

Concrete details about the phishing kit, payload, or specific victim interaction are not available, leaving the precise attack vector uncertain. Defenders should add goldinveste.com and its hosting IP to internal blocklists, monitor traffic to the associated spantrix nameservers, and enforce TLS inspection to catch any future re‑activation attempts. Organizations should educate users to disregard unsolicited communications referencing "Goldinvest" and verify any investment offers through official channels. Incident responders should collect logs referencing 172.93.120.110 and correlate them with other known malicious domains hosted on the same infrastructure to identify potential campaign overlap.