deepcoin-user[.]at

This domain, deepcoin-user.at, is flagged as a high-risk phishing site targeting cryptocurrency exchange users. As of July 27, 2026, the domain remains active and returns an HTTP 200 status, indicating a functional web server. Analysis shows it appears on one security blocklist, and PhishDestroy has blocked access to it.

VirusTotal reports that 14 out of 91 security vendors detect this domain as malicious, though the specific nature of the threat—beyond generic phishing—has not been fully categorized in available intelligence. No brand confirmation, phishing kit identification, or additional infrastructure details (such as ASN, hosting provider, or SSL certificate attributes) are currently available. Defenders should treat this domain as hostile and prioritize blocking it at the DNS and proxy layers.

If internal logs show any connections to deepcoin-user.at, initiate immediate incident response to assess potential credential theft or malware delivery. Further investigation into associated IPs, subdomains, or redirect chains is recommended to identify related infrastructure. The domain's registration details and hosting origin remain unconfirmed, limiting attribution at this stage.