get[.]appsontrcks[.]com

On July 24, 2026 the domain get.appsontrcks.com was observed to return HTTP 200 responses and present a page whose title matches the domain string. The domain is registered through GoDaddy.com, LLC and was created on 2026‑03‑06. DNS resolution points to the Cloudflare‑hosted address 188.114.97.3, which belongs to AS13335 (Cloudflare, Inc.) and is located in the United States. The authoritative nameservers are karina.ns.cloudflare.com and nile.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. TLS negotiation succeeds with a certificate issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint.

Three of ninety‑four VirusTotal scanners flagged the domain, and it appears on a single external blocklist. PhishDestroy has also listed the domain as blocked. The site’s HTTP status code of 200 suggests the content was reachable before the domain was taken offline. No additional intelligence about the page content, targeted brand, or malware kit is available; the only observable attribute is the page title, which repeats the domain name.

The limited telemetry points to a short‑lived phishing infrastructure that leveraged reputable hosting and a trusted certificate to improve credibility. Defenders should continue to monitor the IP address 188.114.97.3 for any re‑use, enforce blocklist entries for the domain, and consider adding the associated nameservers to detection rules. Because the domain is currently offline, immediate remediation focuses on preventing future activation and ensuring that any residual traffic is diverted to safe‑browse responses. Ongoing observation of Cloudflare‑hosted assets that share the same IP or certificate may uncover related campaigns.