cryptocurrencyinvestigationbodyofknowledge[.]com

The domain cryptocurrencyinvestigationbodyofknowledge.com was registered through Porkbun LLC on March 06, 2026 and is currently taken offline, returning the generic Porkbun expired‑domain page title. DNS resolution points to IP address 44.227.65.245, which belongs to Amazon.com, Inc. (AS16509) and is hosted in the United States. The site presented a Let's Encrypt R13 certificate, indicating that TLS was enabled at some point, but the certificate details provide no further validation of the operator.

VirusTotal recorded three positive detections out of ninety‑four scanned engines, and the domain appears on three external blocklists, including PhishDestroy, MetaMask, and SEAL, confirming that multiple security vendors have identified it as malicious. The primary threat vector is classified as a generic phishing campaign, specifically an investment scam, though the exact lures or payloads have not been captured. Evidence suggests the infrastructure was purpose‑built for short‑term abuse, given the recent registration date and rapid takedown.

Defenders should continue to block the domain and its associated IP at network perimeter devices, update DNS sinkhole entries, and monitor for any re‑hosting attempts on adjacent IP ranges within the same Amazon ASN. Continuous observation of the blocklists for re‑appearance is advised, as well as periodic re‑scans of the domain should it become active again. The limited visibility into the landing page content means that threat actors may have employed social engineering templates targeting cryptocurrency investors, so user education campaigns focused on unsolicited investment offers remain a critical mitigation measure.