coinstats-desktop[.]app

This domain, coinstats-desktop.app, is identified as a fraudulent crypto portfolio application impersonating the legitimate CoinStats platform. Analysis indicates it functions as a brand impersonation scam designed to deceive users into downloading malicious software or entering sensitive wallet credentials. The page title, 'CoinStats Desktop — The Ultimate Crypto Portfolio App for Windows,' mimics official branding to enhance credibility, while the underlying infrastructure hosts malicious payloads targeting cryptocurrency users. Infrastructure analysis reveals multiple technical indicators confirming the elevated risk. The domain is flagged by 5 out of 95 security vendors on VirusTotal, appears on 3 security blocklists, and holds a Gridinsoft trust score of 0/100. It was registered through Squarespace Domains II LLC on June 11, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. The domain resolves to IP address 91.92.241.250 and is referenced in 2 AlienVault OTX threat intelligence pulses. Additionally, it is actively blocked by MetaMask, PhishDestroy, and SEAL, further corroborating its malicious intent. As of the latest assessment, coinstats-desktop.app has been taken offline, likely due to enforcement actions or infrastructure dismantling. However, residual risk remains for users who may have interacted with the domain prior to its deactivation. Affected individuals are advised to revoke any wallet permissions, scan systems for malware, and monitor accounts for unauthorized transactions. The anomalous registration date and continued presence in threat intelligence feeds suggest the operators may attempt to re-establish the campaign under a different domain or infrastructure. Vigilance and verification of official sources are recommended for all cryptocurrency-related downloads.