goldcoinreserve[.]io

The domain goldcoinreserve.io was registered on October 16, 2025 through the registrar www.Names.plus and is presently taken offline. DNS resolution points to the IPv4 address 91.92.241.15, which is announced by AS202412 owned by Omegatech LTD in the Netherlands. The authoritative nameservers are ns1.virtualine.org and ns2.virtualine.org. No SSL certificate is presented for the host, indicating that HTTP connections would be unencrypted.

VirusTotal reports that five of ninety‑five scanning engines flagged the domain, confirming that at least a minority of security vendors consider it malicious. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the low reputation assessment. The site’s page title is recorded as "GoldCoinReserve," matching the domain name and suggesting an attempt to appear legitimate. The threat is classified as a brand‑impersonation campaign that targets the brand "across," and the scam type is explicitly listed as Brand Impersonation.

The domain appears on one public security blocklist and has been blocked by the PhishDestroy service, providing additional evidence of malicious intent. Uncertainty remains around the exact payload or credential‑harvesting mechanisms, as no content analysis or HTTP response codes have been observed. Defenders should continue to block the domain at DNS and firewall layers, monitor for any residual traffic to the associated IP address, and consider adding the host to internal blocklists. Threat‑intel teams should enrich the indicator with any future observations of similar naming patterns or shared infrastructure, and analysts should verify that other domains using the same nameservers or IP range are not being abused.