yeahchain-exchange[.]com

Analysis of the domain yeahchain-exchange.com, observed as offline on 24 July 2026, indicates that it was registered on 6 March 2026 through Gname.com Pte. Ltd. The authoritative name servers algin.ns.cloudflare.com and etta.ns.cloudflare.com resolve the domain to the IP address 172.67.163.87, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site served an SSL certificate issued by Google Trust Services under the WE1 designation, confirming that TLS was in place at the time of observation. The page title reported by the crawler reads “Yeahchain Exchange – Secure Social Investment & Trading Platform,” aligning with the classified scam type of a crypto scam. The domain appears on one security blocklist, specifically PhishDestroy, which has already taken the site offline.

VirusTotal scanned the domain and recorded a single positive detection out of 94 submitted security vendors, underscoring that at least one engine identified malicious behavior. No additional public threat‑intel feeds such as OTX or Safe Browsing were cited in the available data. The limited detection footprint suggests that the infrastructure was short‑lived, possibly intended for a targeted campaign against cryptocurrency investors.

Defenders should continue to monitor the IP address and the Cloudflare ASN for any reuse, enforce blocklist entries for the domain and its associated IP, and consider adding the domain to internal URL filtering policies. Because the domain is already taken offline, immediate remediation focuses on preventing future re‑registration or similar variants that might reuse the same registrar or naming pattern. Ongoing vigilance is recommended to detect any resurgence of the campaign under a different domain.