fasstpay[.]co

This domain, fasstpay.co, is currently flagged as an active high-risk phishing site targeting cryptocurrency wallet users. Analysis indicates the infrastructure was established on March 4, 2026, through a registrar known for hosting fraudulent domains, with nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. The site resolves to an IP address 62.84.182.192 located in France under autonomous system AS51167, a network frequently associated with malicious hosting. Although the page currently displays a generic message stating 'Sorry, the website has been stopped,' the HTTP status returns 200, suggesting the server remains operational and capable of serving malicious content. Security vendors have begun detecting this domain, with one out of ninety-five engines on a major scanning platform flagging it as malicious. Additionally, fasstpay.co appears on three security blocklists, including those maintained by cryptocurrency security teams, indicating prior abuse related to wallet credential theft or fraudulent transaction schemes. The SSL certificate, issued by a free and automated certificate authority, provides basic encryption but does not validate the legitimacy of the site, a common tactic used to lend false credibility to phishing pages. While the exact phishing kit or payload remains unconfirmed, the domain's naming convention and blocklist inclusion strongly suggest it mimics legitimate cryptocurrency payment or wallet services. Defenders should treat this domain as hostile and prioritize blocking it at the DNS and network levels. Monitoring for related domains registered through the same nameservers or hosted on the same IP range may reveal additional threats. Given the domain's recent creation and active status, organizations handling cryptocurrency transactions should assume this site remains a live threat vector until further evidence confirms its takedown or remediation.