cryptocurrencytracingbodyofknowledge[.]com

Analysis of cryptocurrencytracingbodyofknowledge.com shows that the domain was created on 06 March 2026 and is hosted on Amazon Web Services (AS16509) at IP address 44.227.65.245. The domain resolves to three Porkbun nameservers (curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com) and serves a Let’s Encrypt R13 certificate, indicating TLS is correctly configured. The site title returned by HTTP requests is "porkbun.com | expired domain," which suggests that the domain is currently parked or otherwise inactive.

The domain is listed on three security blocklists and has been flagged by the PhishDestroy, MetaMask, and SEAL detection platforms. VirusTotal analysis recorded detections from two of ninety‑four scanning engines, reinforcing the suspicion of malicious use. Although the site is presently offline, the combination of recent registration, AWS hosting, TLS provisioning, and blocklist presence aligns with typical infrastructure used for short‑lived credential‑harvesting campaigns.

Defenders should add the IP 44.227.65.245 to network‑level deny lists, enforce DNS filtering for the domain, and monitor for any re‑activation or new subdomains under the same nameserver set. Continuous observation of VirusTotal and other threat‑intel feeds is advised to capture any future changes in detection scores. Given the limited public content, the exact phishing payload or target brand remains unknown, and further sinkholing or sandbox capture would be required for deeper payload analysis.