otocoins[.]vip

Analysis of otocoins.vip, created on July 03, 2026, shows an active high‑risk infrastructure used for generic phishing. The domain is registered through Gname.com Pte. Ltd. and resolves to the IP address 13.192.191.95. Its authoritative name servers are a.share-dns.com, a5.share-dns.com, b.share-dns.net, and b5.share-dns.net, indicating reliance on shared DNS services. Google Safe Browsing has flagged the domain for social engineering, confirming that the URL is being used to lure victims into disclosing credentials or personal data.

The site appears on one public security blocklist and is explicitly blocked by PhishDestroy, reinforcing the view that it is being used for malicious intent. VirusTotal analysis reports that 2 of 91 security vendors have identified the domain as malicious, providing independent corroboration of its threat status. Although the specific brand or service being impersonated is not disclosed in the available intelligence, the combination of registrar data, DNS configuration, IP resolution, and multiple external detections establishes a credible phishing risk.

Defenders should add otocoins.vip to network‑level blocklists, update endpoint protection signatures, and monitor DNS queries for the listed name servers. Continuous observation of the IP address 13.192.191.95 for any additional malicious activity is recommended, as is periodic re‑scanning with VirusTotal or similar platforms to capture any changes in detection coverage. The lack of publicly available SSL or HTTP response details leaves the exact content of the site unknown, so threat‑hunting teams should treat any traffic to this domain as suspicious until further forensic evidence is obtained.