goldvest[.]co

Analysis of the domain goldvest.co shows that it was created on 24 April 2025 via the registrar PDR Ltd. d/b/a PublicDomainRegistry.com. The domain is delegated to the authoritative nameservers ns1.monovm.host and ns2.monovm.host and resolves to the IPv4 address 146.70.118.226. That address is registered to AS9009 M247 Europe SRL and is geolocated in Germany. No TLS certificate is presented for the host, indicating that any HTTP traffic would be unencrypted.

The only visible page metadata is the title “Gold Vest”. The domain has been classified as a generic phishing site and was taken offline before the date of this report; it is currently listed as blocked by the PhishDestroy blocklist and appears on one additional security blocklist. Gridinsoft assigns a trust score of 0 out of 100, which signals a high probability of malicious use. VirusTotal records indicate that the domain was scanned by 95 antivirus engines, none of which generated a detection at the time of scanning; this lack of detections does not constitute evidence of safety.

Because the site is offline, the actual phishing payload, login form, or targeted brand cannot be confirmed, leaving the precise victim‑targeting details unknown. Defenders should continue to block goldvest.co at DNS and network perimeter layers, monitor the associated IP address for any re‑activation, and add the domain to internal blocklists. Ongoing surveillance of the registrar and hosting infrastructure is advised to detect potential re‑registration or migration to alternative services.