multicoin-invest[.]com

Analysis indicates that multicoin-invest.com is an active investment scam domain registered on February 21, 2026, through Sav.com, LLC. The domain resolves to IP 173.0.59.2, hosted on AS27323 (Wowrack.com) in the United States. Infrastructure review shows nameservers ns5.sammiehost.com and ns6.sammiehost.com, with an MX record pointing to the domain itself, a common tactic to appear legitimate while avoiding external email scrutiny. The site returns an HTTP 200 status, suggesting operational hosting, and employs technologies including PHP, Bootstrap, LiteSpeed, and multiple third-party scripts (GSAP, Smartsupp, OWL Carousel, jQuery, Crisp Live Chat), which may facilitate dynamic content delivery or user interaction tracking. The page title 'MULTICOIN CAPITAL Investments' aligns with the reported scam type, targeting individuals seeking cryptocurrency investment opportunities. As of July 13, 2026, the domain remains active and is flagged by one security blocklist (PhishDestroy). A Gridinsoft trust score of 0/100 further corroborates its malicious classification. While nine of 93 security vendors on VirusTotal have detected the domain, this partial detection rate does not diminish its confirmed status as an active threat. Defenders should prioritize blocking the domain, its resolving IP (173.0.59.2), and associated nameservers. Monitoring for related domains registered through the same registrar or utilizing identical hosting infrastructure may help identify additional threats. Given the domain's age and continued activity, it is likely part of a broader campaign; defenders are advised to check for indicators of compromise linked to this infrastructure in historical logs or network traffic.