trading-view-app[.]at

This domain is flagged as a high-risk generic phishing site designed to distribute fraudulent software under the guise of a legitimate financial charting application. Analysis indicates the site mimics the official TradingView platform, presenting a download page titled 'TradingView Download - Install TradingView App' to deceive users into installing malicious or counterfeit applications. The intent is likely credential harvesting, malware deployment, or financial fraud through fake investment tools. Infrastructure analysis reveals the domain trading-view-app.at was registered on March 07, 2026, an anomalous future date suggesting domain spoofing or registrar manipulation. It resolves to IP address 172.67.150.160, hosted behind Cloudflare, which may obscure origin and complicate takedown efforts. The domain appears on three security blocklists and is actively blocked by multiple security tools. A Gridinsoft trust score of 0/100 and detection by 12 of 95 security vendors on VirusTotal confirm its malicious classification. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Detected technologies include Cloudflare, Cloudflare Browser Insights, and HTTP/3, consistent with modern phishing infrastructure. Mitigation requires immediate blocking of the domain and its associated IP across all network security layers. Organizations should update endpoint detection rules to flag downloads from non-official app stores or domains containing 'tradingview' variants. Users should be educated to verify domain authenticity by checking official sources and avoiding third-party download links. Security teams are advised to monitor for connections to 172.67.150.160 and correlate with any recent user reports of unexpected application installations. Given the domain's current offline status, continuous monitoring for re-emergence under similar naming conventions is recommended.