swapdexair04-fr[.]fyi

This domain, swapdexair04-fr.fyi, is identified as a generic phishing site specifically designed to mimic legitimate login pages. The primary threat posed by this domain is the potential theft of user credentials, which can lead to unauthorized access to personal and financial accounts. The domain's structure and page title suggest an attempt to impersonate a legitimate contact page for a domain registrar, leveraging the trust users associate with such entities.

Infrastructure analysis reveals that the domain was registered through Epik LLC on April 10, 2026. The domain resolves to the IP address 209.196.146.115, which is located in the United States and is associated with Epik LLC. According to VirusTotal, 20 out of 95 security vendors have flagged this domain as malicious, indicating a significant level of suspicion and potential risk. The domain also appears on one security blocklist, further corroborating its malicious nature. The use of a Let's Encrypt SSL certificate, typically issued for free, suggests an attempt to appear more credible and secure to unsuspecting users.

Users who may have visited swapdexair04-fr.fyi are advised to change passwords for any accounts they may have entered credentials into, especially those related to financial or sensitive data. It is recommended to monitor account activity for any unauthorized transactions or changes. Additionally, users should report the suspicious domain to their respective security teams or organizations and avoid clicking on any links or providing personal information on similar sites in the future.