pulsar-vexline-ca[.]com

Analysis of pulsar-vexline-ca.com shows a deliberately crafted cryptocurrency trading front that aligns with the “Fake Exchange” scam type. The domain was registered on March 06, 2026 through NameCheap, Inc., and its DNS resolves to 172.67.167.43, an IP address owned by Cloudflare (AS13335) located in the United States. No SSL certificate is presented, indicating that the site operated without HTTPS protection. The page title retrieved from the live capture reads “Pulsar Vexline — Official Cryptocurrency Trading Platform with AI Autopilot for Secure, Stable Results,” which directly advertises a non‑existent trading service and attempts to lure victims with AI‑driven promises. VirusTotal scans have flagged the domain on three of ninety‑four security vendor engines, and the domain appears on three independent blocklists.

Additional defensive feeds have recorded the domain as blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple anti‑phishing and wallet‑security solutions have identified it as malicious. The nameservers vivienne.ns.cloudflare.com and wesley.ns.cloudflare.com are standard Cloudflare services, providing no additional attribution beyond the hosting provider. Current operational status is offline, which limits immediate interaction but does not remove the threat of residual infrastructure such as the domain’s registration and IP association. Defenders should continue to monitor the IP address 172.67.167.43 for any re‑use in related campaigns, ensure that outbound traffic to this host is denied, and add the domain to internal blocklists.

Since the site lacks TLS, any future activation would be trivially detectable via HTTP inspection. Threat intelligence platforms should update their feeds to reflect the confirmed fake exchange classification and note the recent creation date, which suggests rapid deployment typical of opportunistic crypto‑focused scams.