velorafondsaiv2-fr[.]live

As of July 13, 2026, the domain velorafondsaiv2-fr.live is confirmed to be a high-risk crypto scam. The site presents itself as 'VéloraFonds AI v2+ | Plateforme officielle de trading assisté par IA', suggesting it is designed to appear as a legitimate trading platform assisted by artificial intelligence. However, this facade is likely intended to deceive users and facilitate fraudulent activities. The domain was registered on May 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is currently active, resolving to the IP address 172.67.161.147, which is located in a Cloudflare data center in Canada. This hosting choice is notable as scammers often use reputable cloud services to avoid immediate detection and blocking. The domain is flagged by PhishDestroy and appears on one security blocklist, indicating that it has been identified as a threat by cybersecurity professionals. Infrastructure analysis reveals that the domain uses nameservers provided by Cloudflare, specifically hal.ns.cloudflare.com and jocelyn.ns.cloudflare.com. The SSL certificate is issued by Let's Encrypt, which, while legitimate, is commonly used by scammers to gain user trust. Additionally, the domain is referenced in one threat intelligence pulse on AlienVault OTX, further corroborating its involvement in malicious activities. The Gridinsoft trust score for the domain is 0/100, the lowest possible, signaling a significant risk to users. Analysis indicates that the site's actual content and functionality have not been fully scrutinized, but based on the available evidence, it is strongly advised that users avoid visiting this domain. Defenders should monitor for any signs of activity related to this domain and consider blocking it at the network level to prevent potential financial losses and data breaches.