xn--papyha-zua[.]fr

The domain www.xn--papyha-zua.fr was registered on March 03, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and uses the registrar‑provided nameservers ina1.registrar.eu, ina2.registrar.eu, and ina3.registrar.eu. Infrastructure analysis shows the domain resolves to IP 64.29.17.65, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site is currently offline and does not present an SSL certificate; however, HTTP headers indicate HSTS is enforced, suggesting the original content was served over HTTPS. Technology fingerprints identify Vercel as the hosting platform, consistent with the Amazon‑backed IP range.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme risk. VirusTotal scans have flagged the domain in seven out of ninety‑four security engines, and the domain appears on a single public blocklist, specifically PhishDestroy. The page title captured during the brief live period reads "[Quête] Reflet Frigostiale | Le Bazar de Papycha," but no further content analysis is available.

Given the combination of a newly created punycode domain, low trust score, multiple vendor detections, and blocklist inclusion, the domain should be treated as a confirmed phishing vector. Defenders are advised to add the domain and its resolving IP to outbound and inbound deny lists, monitor for any resurrection of the site, and watch for similarly structured punycode domains that may target French‑speaking users. Continuous threat‑intel feeds should be consulted for updates on detection counts and any new indicators of compromise associated with the Vercel hosting environment.