framtida[.]live

Analysis of the domain framtida.live indicates active phishing infrastructure targeting users of AI-assisted trading platforms. Registered on May 18, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 172.67.188.249, hosted on Cloudflare infrastructure in Canada. The page title, "Framtida | Official Platform for AI Assisted Trading," suggests an attempt to impersonate a legitimate trading service, though no specific brand is confirmed in available data. The domain currently returns an HTTP 200 status, confirming operational status as of July 12, 2026. Infrastructure review shows the domain uses Cloudflare nameservers (adi.ns.cloudflare.com, leland.ns.cloudflare.com) and a Let's Encrypt SSL certificate (E7). Security assessments reveal a Gridinsoft trust score of 0/100, and the domain appears on one security blocklist, specifically PhishDestroy. AlienVault OTX records the domain in a single threat intelligence pulse, while VirusTotal reports one detection from 92 security vendors. The limited detection rate does not rule out malicious activity, particularly given the domain's recent registration and lack of established reputation. Defenders should treat framtida.live as high-risk phishing infrastructure. Network-level blocking is recommended, particularly for organizations in financial or trading sectors. Further analysis of the site's content and backend connections is advised to determine the exact nature of the threat, including potential credential harvesting or fraudulent transaction mechanisms. Monitoring for related domains registered through the same registrar or resolving to the same IP may identify additional components of this campaign.