buildcoinexpertpro[.]co

buildcoinexpertpro.co was registered through NameSilo, LLC and first observed on February 8 2026. The domain resolves to the IPv4 address 149.56.180.36 and is served by the authoritative name servers ns3.ddoscure.com, ns4.ddoscure.com, ns5.ddoscure.com, ns6.ddoscure.com, and protected3.d. Threat intelligence indicates that the domain appears on a single security blocklist and has been actively blocked by the PhishDestroy feed.

VirusTotal analysis shows that four of ninety‑one scanning engines have flagged the domain as malicious, reinforcing the suspicion of phishing behavior. The high risk rating assigned by internal assessment aligns with the observed indicators, and the domain remains active as of the report date, July 27 2026. Current evidence does not include SSL certificate details, HTTP response codes, or page title information, limiting the ability to confirm the exact phishing payload or target brand.

Nonetheless, the combination of recent registration, single‑blocklist presence, active blocking by PhishDestroy, and multiple vendor detections provides sufficient confidence to classify the site as a confirmed phishing operation. Defenders should add the domain to local blocklists, monitor DNS queries for the listed IP address, and consider isolating traffic to the associated nameservers. Continuous re‑evaluation is advised in case additional indicators, such as payload samples or victim reports, become available.