vastechainoire-fr[.]com

VasteChainoire-fr.com was registered on May 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted behind Cloudflare infrastructure with an apparent location in Canada. The domain resolves to IP address 172.67.182.68 and uses the Cloudflare nameservers bradley.ns.cloudflare.com and treasure.ns.cloudflare.com. An active TLS certificate issued by Let’s Encrypt (E7) secures the site, and HTTP requests return status code 200. The landing page presents itself as “Vaste Chainoire | Plateforme officielle de trading assisté par IA”, a typical lure for a fake exchange operation. VirusTotal analysis shows that 3 of 95 security vendors have flagged the domain, and it appears on a single public blocklist. AlienVault OTX lists the domain in one threat pulse, and PhishDestroy has already blocked it. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. Based on the observed indicators, the domain aligns with a high‑risk generic phishing campaign that masquerades as an AI‑assisted trading platform. The combination of a recent registration date, Cloudflare masking, low trust score, and detection by multiple intelligence sources supports the classification as a fake exchange phishing site. The active status and valid SSL certificate enable the actors to present a credible façade to potential victims. Defenders should add 172.67.182.68 and the fully qualified domain name to outbound and inbound block lists, enforce DNS sinkholing for the domain, and monitor for any HTTP requests to the host. Continuous threat‑intel feeds should be consulted for updates, and any observed credential or payment data submissions to the site should be treated as compromised. Rapid removal of the domain from corporate DNS and email filters is advised to mitigate exposure.