trade[.]vaultrogoldheritage[.]com

This domain, trade.vaultrogoldheritage.com, is flagged as an active cryptocurrency scam targeting Ethereum users. Registered on February 21, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com, the domain remains operational as of July 12, 2026, despite its high-risk classification. Analysis indicates the site impersonates Ethereum, as explicitly stated in the provided page title: 'Forex, Bitcoin, Bitcoin Cash, Ethereum, Cryptocurrency & Option Trading | TradeVaultroHeritage.' The domain currently resolves to IP address 172.245.14.133, hosted on AS36352 (HostPapa) in the United States, and returns an HTTP 403 status code, suggesting access restrictions or server misconfiguration. Infrastructure review reveals the domain uses nameservers ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended-domain.com, which may indicate an attempt to obscure ownership or evade detection. No SSL certificate is present, increasing the likelihood of unencrypted communications and potential interception of sensitive data. Security vendor detection is limited but notable: 2 out of 95 engines on VirusTotal flagged the domain as malicious. Additionally, the domain appears on one security blocklist and is explicitly blocked by PhishDestroy. The exact nature of the scam remains uncertain due to the lack of detailed page content analysis. However, the combination of brand impersonation, cryptocurrency focus, and absence of legitimate security measures strongly suggests an intent to deceive users into transferring funds or disclosing credentials. Defenders should treat this domain as hostile and prioritize blocking it at the DNS or network level. Monitoring for related domains registered through the same registrar or resolving to the same IP may help identify broader campaign infrastructure. No further brand-specific indicators are available beyond the Ethereum impersonation noted in the page title.