goldpocket[.]space

This domain, goldpocket.space, is flagged for brand impersonation targeting individuals through an investment scam. The site presents itself as a global trading platform offering forex, commodities, stocks, indices, cryptocurrencies, gold, and oil under the fabricated brand name 'Goldpocket.' Analysis of the page title and structure indicates an attempt to deceive users into believing it is a legitimate financial service provider, likely to facilitate fraudulent transactions or data harvesting. Technical indicators reveal the domain was registered on May 15, 2026, through Gname.com Pte. Ltd., an uncommon registration pattern suggesting potential abuse. It resolves to IP address 172.67.192.10, which is associated with Cloudflare infrastructure, a common tactic to obscure hosting origins. The domain currently holds a VirusTotal detection score of 0/95, indicating no antivirus engines have flagged it yet, though it appears on 2 security blocklists. The SSL certificate is issued by Let's Encrypt, and technologies such as HSTS and HTTP/3 are employed, likely to enhance perceived legitimacy. As of the latest assessment, goldpocket.space has been taken offline, reducing immediate exposure risk. However, the domain remains under investigation due to its recent registration date discrepancy (2026) and association with known fraudulent patterns. Users are advised to treat any prior engagement with this domain as compromised and to verify financial platforms through official channels only. Ongoing monitoring is recommended, as threat actors may re-deploy similar infrastructure under new domains.