aitrade[.]live

The domain aitrade.live is currently flagged as an active phishing threat targeting users of a platform identified by its page title, 'Ai Trader.' Registered on January 14, 2025, through GoDaddy.com, LLC, the domain resolves to the IP address 104.21.91.145, which is associated with AS13335, operated by Cloudflare, Inc. in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (nora.ns.cloudflare.com and damon.ns.cloudflare.com) and detected technologies include Nginx and OpenResty, which are commonly employed to obscure backend infrastructure and enhance performance for malicious sites. Assessment of available intelligence indicates a low trust score across multiple evaluation platforms. Scamadviser assigns a trust score of 42 out of 100, while Gridinsoft rates the domain at 0 out of 100, suggesting a high likelihood of fraudulent activity. The domain appears on at least one security blocklist, specifically PhishDestroy, and is flagged by one out of 95 security vendors on VirusTotal. The absence of an SSL certificate further reduces the domain's legitimacy, as modern secure sites typically enforce encrypted connections. The HTTP status code 200 confirms the site is accessible, allowing potential victims to interact with its content. The exact nature of the phishing scheme remains partially uncertain due to the lack of detailed content analysis. However, the page title 'Ai Trader' implies the domain may impersonate a trading or investment platform leveraging artificial intelligence as a lure. Defenders should prioritize monitoring and blocking this domain, particularly in environments where financial or trading-related services are accessed. Network-level protections, such as DNS filtering or IP-based blocking of 104.21.91.145, are recommended to mitigate exposure. Given the domain's registration age and active status, continued vigilance is warranted, as threat actors frequently reuse infrastructure for prolonged campaigns.