swapoirecette[.]live

This domain, swapoirecette.live, poses a credential theft and financial fraud risk by impersonating an official AI-assisted trading platform. The site uses the page title 'Swapoire! Cette | Official Platform for AI Assisted Trading' to deceive users into believing it is a legitimate trading service, likely targeting individuals interested in automated cryptocurrency or financial trading. Analysis indicates the infrastructure is designed to harvest login credentials, payment details, or deploy malicious scripts under the guise of AI-driven investment tools, a common tactic in financial phishing campaigns. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on May 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, an offshore registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate, which, while common for legitimate sites, is also widely abused by threat actors to create a false sense of security. The domain appears on one security blocklist and is flagged by 4 out of 95 security vendors on VirusTotal. Additionally, it has been documented in one threat intelligence pulse on AlienVault OTX, further confirming its malicious classification. Users who visited swapoirecette.live should take immediate action to mitigate potential compromise. If credentials or financial information were entered, affected individuals should change passwords for all associated accounts, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. Devices used to access the site should be scanned for malware using updated security tools. Given the domain's current offline status, users should remain vigilant for similar phishing attempts, particularly those leveraging AI or automated trading themes, and verify the legitimacy of any financial platform before engaging with it.