The domain carpro-coin.cc was registered on December 15, 2025 through Gname.com Pte. Ltd. and is currently active. It resolves to the IP address 188.114.97.3 and is served by Cloudflare nameservers amy.ns.cloudflare.com and cleo.ns.cloudflare.com. The TLS certificate presented by the site is issued by Google Trust Services under the WE1 authority, indicating a legitimate‑looking HTTPS connection.
VirusTotal analysis shows that three out of ninety‑one scanned security vendors flag the domain, confirming malicious intent consistent with the generic phishing classification. The domain appears on three external security blocklists and is already blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the high‑risk rating assigned by analysts. No public page title or content analysis is available, so the exact phishing lure or credential‑stealing mechanisms remain unverified.
Defenders should treat carpro-coin.cc as a confirmed phishing infrastructure: add the domain to internal URL filtering and DNS block policies, monitor outbound connections to its IP, and consider sinkholing the address if feasible. Continuous re‑scanning with multi‑vendor engines is advised to capture any evolution in payload or detection rates. Given the recent registration date and active status, rapid propagation is possible, so proactive blocking and user awareness messaging are recommended to mitigate exposure.