goyimonsol[.]com

The domain goyimonsol.com has been identified as a generic phishing threat targeting users of the $GOYIM cryptocurrency token. This fraudulent site was designed to mimic legitimate token interfaces and likely intended to steal wallet credentials or private keys through a drainer kit. The domain was registered through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains, and was created on February 21, 2026, indicating a very recent appearance in the threat landscape.

Technical analysis reveals that goyimonsol.com resolves to IP address 188.114.96.3 and is protected by an SSL certificate from Google Trust Services. VirusTotal data shows that 4 out of 95 security vendors flagged this domain as malicious, and it appears on 3 security blocklists. The site's page title was "$GOYIM," directly referencing the token to lure victims. The domain is currently offline, suggesting that hosting providers or registrars have taken action in response to abuse reports.

Despite being offline, the risk remains elevated because similar domains may reappear under different names. Users who interacted with goyimonsol.com should immediately revoke any token approvals and rotate their wallet keys. PhishDestroy recommends avoiding unknown crypto sites and verifying URLs through official channels. The combination of a recent creation date, low registrar reputation, and multiple vendor flags confirms this as a high-confidence phishing threat.