fund-exa[.]live

This domain is flagged as a high-risk generic phishing threat. Analysis of intelligence data shows that fund-exa.live was registered on January 25, 2026, through Spaceship, Inc., and currently resolves to IP address 198.251.84.200, hosted in Luxembourg by FranTech Solutions. The domain is active and uses a 302 HTTP redirect. VirusTotal indicates 8 out of 91 security vendors flag this domain as malicious. The page title is 'Fund Exa', but the specific brand or service targeted has not been confirmed from available data. The domain appears on one security blocklist and is found in two threat intelligence pulses on AlienVault OTX, as well as being blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt (R12). Technologies detected include PHP, LiteSpeed, jQuery UI, jQuery, JivoChat, Clipboard.js, and HTTP/3. Gridinsoft trust score is 0/100. The exact content and visual appearance of the site have not been analyzed, so the specific phishing lure or brand impersonation remains unconfirmed. Defenders should treat this domain as active and hostile, block access at the network level, and monitor for any related infrastructure or email campaigns using similar domain patterns.