register-fartcoin[.]net

This domain, register-fartcoin.net, is actively flagged as a high-risk phishing site targeting cryptocurrency users. Registered on May 1, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain currently resolves to a Cloudflare IP address (172.67.167.142) located in Canada. Analysis indicates the site is using Cloudflare nameservers (penny.ns.cloudflare.com and scott.ns.cloudflare.com) and a Let's Encrypt SSL certificate (E8), which are common among both legitimate and malicious infrastructure. The domain returns an HTTP 403 status, suggesting access restrictions or a placeholder page, though this does not rule out active malicious use behind the scenes. The domain appears on three security blocklists and has been identified in one AlienVault OTX threat intelligence pulse, reinforcing its classification as malicious. VirusTotal reports that 4 out of 95 security vendors have flagged the domain, while Gridinsoft assigns it a trust score of 0/100. These indicators, combined with its presence on blocklists maintained by PhishDestroy, MetaMask, and SEAL, confirm its association with phishing activity. The name "fartcoin" suggests an attempt to impersonate or parody cryptocurrency platforms, a tactic often used to lure victims into fake registration or wallet schemes. Defenders should treat this domain as hostile and prioritize blocking it at the network level. The use of Cloudflare infrastructure complicates IP-based blocking, so DNS-level or domain-based restrictions are recommended. Given its recent registration and active status, monitoring for related domains or subdomains using similar naming conventions (e.g., variations of "fartcoin") is advised. While the exact phishing kit or payload remains unconfirmed, the domain's association with cryptocurrency fraud aligns with common attack patterns observed in 2026. No legitimate use case for this domain has been identified, and its continued operation warrants immediate containment.