crypto-portfolio-tracker[.]app

This domain, crypto-portfolio-tracker.app, was identified as a cryptocurrency credential phishing site designed to harvest wallet login credentials and private keys from unsuspecting users. The site masqueraded as a legitimate cryptocurrency portfolio tracker, presenting a fabricated interface labeled 'Crypto Portfolio - Track Your Crypto Assets' to deceive visitors into entering sensitive financial information. Such phishing schemes are commonly used to gain unauthorized access to digital wallets, leading to immediate asset theft and long-term financial fraud. Analysis indicates the domain was registered on February 21, 2026, through NameCheap, Inc., a registrar frequently utilized in phishing operations due to its accessibility and low-cost domain offerings. The site resolved to the IP address 216.150.1.1 and employed a Let's Encrypt SSL certificate to create a false sense of security. Detection metrics reveal that 3 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appeared on three independent security blocklists. Additional infrastructure analysis detected the use of Vercel hosting, HSTS headers, and Google Analytics, suggesting an attempt to mimic legitimate service deployment practices. Users who visited crypto-portfolio-tracker.app should immediately revoke any permissions granted to the site in browser-based wallet extensions or applications. All credentials entered on the site must be considered compromised and should be changed across all platforms where they were reused. Affected individuals should monitor their cryptocurrency wallets for unauthorized transactions and enable multi-factor authentication on all financial accounts. If private keys or recovery phrases were disclosed, users are advised to transfer remaining assets to a new, secure wallet. System scans using updated security tools are recommended to detect any residual malware or tracking mechanisms.