tryggovgestheim[.]live

This domain, tryggovgestheim.live, has been identified as a confirmed phishing site. The domain claims to be an official platform for AI-assisted trading, potentially targeting individuals interested in financial trading or cryptocurrency. The site uses sophisticated technical infrastructure to appear legitimate, increasing the likelihood of user deception and credential theft.

Analysis indicates that the domain has a VirusTotal score of 5/95, with multiple security vendors flagging it as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been associated with various suspicious activities. It resolves to the IPv6 address 2a06:98c1:3120::3 and was created on May 26, 2026. The Gridinsoft trust score is 0/100, reflecting a complete lack of trustworthiness. The domain also appears on one security blocklist and is blocked by PhishDestroy, further confirming its malicious nature. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites to establish secure connections and evade detection.

Currently, the domain is offline, which may indicate that it has been taken down by authorities or the hosting provider. Despite this, the elevated risk level suggests that the threat actors may attempt to resurrect the domain or redirect it to another malicious server. Users are advised to avoid any links or emails related to this domain and to monitor their accounts for any unauthorized activity. Security teams should continue to monitor the domain for reactivation and ensure that appropriate blocks and alerts are in place to protect users.