epargneplateforme-fr[.]live

PhishDestroy identifies epargneplateforme-fr.live as an active credential theft domain masquerading as a legitimate French savings platform. This domain employs brand impersonation to trick users into entering sensitive login credentials, exposing them to direct account compromise. The threat actor leverages social engineering tactics, capitalizing on the trusted appearance of a financial institution to deceive victims into surrendering authentication details. This domain was flagged with critical indicators: it registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, was created on May 07, 2026, and resolves to IP 172.67.169.159. Security scans show 3/95 detections on VirusTotal, indicating it remains undetected by most antivirus engines. The domain also utilizes a Let's Encrypt SSL certificate, further enhancing its legitimacy to unsuspecting users. Given its recent creation and lack of detection, this campaign poses an immediate risk to users interacting with financial platforms. Users who visited this domain should immediately change passwords for any accounts entered on the site and enable multi-factor authentication where available. Avoid clicking links or downloading files from this domain. Report the domain to your email provider and browser security teams for blacklisting. Monitor financial accounts closely for unauthorized transactions and consider using identity theft protection services if sensitive credentials were submitted.