The domain trackingo8.info was registered on July 22, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently resolved to the IP address 31.76.87.189. Both authoritative name servers are hosted by Cloudflare (javier.ns.cloudflare.com and susan.ns.cloudflare.com), indicating the use of a reputable DNS provider to obscure the true hosting location. VirusTotal analysis shows that 5 of 91 security vendors have flagged the domain as malicious, suggesting a modest but non‑trivial detection rate across the scanning ecosystem. The domain appears on a single security blocklist and is specifically listed by PhishDestroy, confirming that at least one dedicated anti‑phishing service has taken action to block it.
The threat type is classified as a delivery scam, although no additional details about the targeted brand or the exact content of the site have been disclosed. The infrastructure signals a newly created domain with a short operational window, and the active status as of the report date indicates that the site is still reachable. While the presence of Cloudflare name servers may provide some resilience against takedown, the identified IP address and blocklist entries provide concrete indicators that can be leveraged for defensive measures.
Defenders should immediately add trackingo8.info and its resolved IP 31.76.87.189 to outbound and inbound blocklists, monitor DNS queries for the associated Cloudflare name servers, and deploy heuristic rules that flag traffic to newly registered domains with similar detection patterns. Continuous re‑evaluation is advised, as additional security vendors may update their verdicts and further blocklists could surface. Until more detailed payload analysis becomes available, the current evidence supports a high‑risk posture for any interaction with this domain.