lecarrefourdesartistes[.]com

Analysis of lecarrefourdesartistes.com shows an active generic phishing operation targeting cryptocurrency users. The domain was registered on June 11, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to IP 107.149.92.145, which is allocated to AS134365 Ansheng Network Technology Co., Limited in Hong Kong. The web server is Nginx with HTTP Strict Transport Security enabled and presents a TLS certificate from Let’s Encrypt (YR1). The only visible page title reads "波币钱包APP平台下载 - 官方正版交易平台," indicating a claim to be an official wallet download platform. Gridinsoft assigns a trust score of 0/100, the site appears on one security blocklist, and it is flagged by PhishDestroy. AlienVault OTX references the domain in two threat‑intelligence pulses, and VirusTotal reports three of ninety‑one scanners flagging the site as malicious. Current evidence confirms the domain is being used for a crypto‑related phishing scam, but the exact payload or credential‑harvesting mechanisms have not been publicly disclosed. Defenders should block DNS resolution and HTTP/S traffic to lecarrefourdesartistes.com and its associated IP address, ingest the domain and IP into intrusion‑detection signatures, and monitor outbound connections for any attempts to contact the server. Users should be warned not to download wallet applications from this URL, and any credentials entered should be treated as compromised. Ongoing monitoring of the IP and any related subdomains is recommended, as the infrastructure may expand or shift.