haschagne[.]com

The domain haschagne.com is identified as a brand impersonation threat targeting Ethereum, a major cryptocurrency platform. Analysis confirms the domain was designed to mimic legitimate cryptocurrency exchange services, specifically presenting itself as a platform for buying and selling Bitcoin and Ethereum. The domain is currently offline, but prior activity indicates malicious intent to deceive users into disclosing credentials or transferring funds to attacker-controlled wallets. Infrastructure analysis reveals the domain was registered on July 05, 2025, through NameSilo, LLC, and resolved to the IP address 104.21.48.1. Security assessments show the domain holds a Gridinsoft trust score of 0/100 and appears on one security blocklist. VirusTotal detection metrics indicate that 5 out of 95 security vendors flagged haschagne.com as malicious. The page title, "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | HasChagne," further corroborates the impersonation of legitimate crypto exchange platforms to exploit user trust. Current status indicates the domain has been taken offline, likely due to detection and mitigation efforts. However, the technical indicators—including the recent registration date, low trust scores, and security vendor detections—suggest a deliberate attempt to conduct phishing or fraudulent transactions. Organizations and individuals are advised to block the domain and associated IP (104.21.48.1) at the network level. Users should verify the authenticity of cryptocurrency platforms by cross-referencing official domains and enabling multi-factor authentication on all financial accounts. Monitoring for similar impersonation domains registered via NameSilo or resolving to the same IP range is recommended for proactive defense.