saucerswapdex[.]live

Analysis indicates that the domain saucerswapdex.live was registered on 21 February 2026 through Web Commerce Communications Limited. The authoritative nameservers are aron.ns.cloudflare.com and bradley.ns.cloudflare.com, and the domain resolves to IP 172.67.156.46, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. HTTP requests return a 404 Not Found page title, suggesting that the site is not serving content at the time of observation. The SSL certificate presented is identified as WE1, a typical Cloudflare‑issued certificate. The domain has been classified as a crypto‑related phishing campaign, and the threat is listed as generic phishing.

It has been blocked by the PhishDestroy service and appears on one external security blocklist. VirusTotal records show that the domain was scanned by 95 antivirus and URL‑reputation vendors, with none currently flagging it; this absence of detections does not constitute evidence of legitimacy. The current operational status is offline, indicating that the infrastructure may be temporarily withdrawn or awaiting further use. Uncertainty remains regarding the specific phishing payload or landing pages that were previously hosted, as the only observable HTTP response is the 404 page title. No Safe Browsing, OTX, or additional blocklist entries are reported beyond the single list.

Consequently, defenders cannot assess the full scope of victim targeting or the potential for re‑activation. Defensive recommendations include adding saucerswapdex.live to internal URL filtering and endpoint protection deny lists, monitoring DNS queries for the associated Cloudflare IP range, and maintaining vigilance for any future re‑registration of the domain or similar domains created by the same registrar.