chopetaclasse[.]com

On 20 July 2026, an investigation was opened for the domain chopetaclasse.com, which was registered four days earlier on 16 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain remains active and resolves to the IPv4 address 193.108.130.11. The hosting appears to be provided by the private nameservers ns1.private-nameserver.net, ns2.private-nameserver.net, and ns3.private-nameserver.net. The domain is currently listed on a single security blocklist and has been flagged by the PhishDestroy feed, indicating that it is being used for malicious phishing activity. VirusTotal reports that the domain was submitted to 95 scanning engines, none of which returned a detection at the time of analysis; this lack of detection does not constitute a safety assurance. No public SSL certificate details, HTTP response codes, or page title information are available in the current intelligence set, limiting the ability to confirm the exact landing page content. Likewise, there are no records of Safe Browsing or Open Threat Exchange (OTX) classifications for this domain. The observable infrastructure—recent creation, dedicated private nameservers, and rapid appearance on a phishing blocklist—aligns with patterns commonly observed in short‑lived phishing campaigns. Defenders should block the domain at the DNS and proxy layers, monitor outbound connections to 193.108.130.11, and add the domain to internal blocklists. Continuous re‑scanning with multi‑engine services and periodic checks against threat‑intel feeds are recommended to capture any future changes in classification or hosting behavior.