cointrackers[.]at

The domain cointrackers.at is currently active and returns an HTTP 301 redirect. DNS resolution points to 209.74.82.247, a server hosted in Singapore under AS22612 operated by Namecheap, Inc., and the authoritative nameservers are a.dnspod.com, b.dnspod.com, and c.dnspod.com. The site presents a TLS certificate issued by Let’s Encrypt (year‑2 renewal) and is served by Nginx. Reputation services assign a Gridinsoft score of 0/100 and three independent blocklists have listed the domain. VirusTotal analysis shows four of ninety‑one scanners flagging the host, confirming malicious intent. The page title advertises “CoinTracker | Crypto Tax + Portfolio Tracking — Year‑Round, from $59/Year,” suggesting a counterfeit offering aimed at cryptocurrency users. Registration details indicate the domain was created through Hosting concepts B.V. via the .at registrar portal. The domain is already blocked by PhishDestroy, MetaMask, and SEAL. At present no additional page content has been examined, so the exact phishing vector remains unknown. Defenders should block resolution to 209.74.82.247, add cointrackers.at to web‑filter deny lists, monitor for similar dnspod.com name‑server patterns, and enforce TLS inspection to detect any credential‑harvesting traffic. Continuous observation of the listed blocklists and periodic VirusTotal rescans are recommended to capture any changes in the domain’s behavior.