fintracee[.]com

Analysis on fintracee.com, observed as offline as of July 23 2026, indicates a high‑confidence malicious infrastructure targeting Ethereum users. The domain was registered on 18 May 2025 through the REGRU‑RU registrar and resolves to 172.67.141.52, an address owned by Cloudflare, Inc. (AS13335) located in the United States. No TLS certificate is presented, meaning connections are not encrypted. The site’s title, “AML Checker – Get Your First Check Free!

Verify your wallet for risk transaction,” advertises a free anti‑money‑laundering check and explicitly references Bitcoin, USDT, and Ethereum, suggesting a wallet‑or‑seed phishing campaign. Scamadviser assigns a trust score of 1 / 100 and Gridinsoft rates it 0 / 100, both indicating extreme untrustworthiness. The domain appears on a single security blocklist and has been flagged by PhishDestroy. AlienVault OTX lists the domain in one threat‑intel pulse, and VirusTotal reports detections by eight of ninety‑five security vendors, reinforcing the malicious classification.

The branding is explicitly aligned with Ethereum, and the page claims to verify wallets for risk transactions, a common lure for credential harvesting. While the exact phishing kit or drop‑site content has not been captured, the convergence of low trust scores, blocklist presence, multiple vendor detections, and the targeted branding constitute strong evidence of a wallet‑seed phishing operation. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the 172.67.141.52 address, and advise users to avoid any unsolicited wallet verification requests referencing Ethereum or other crypto assets. Ongoing intelligence gathering should focus on any future re‑hosting attempts or related domains registered by the same registrar.