fundedtradingplus[.]live

This domain, fundedtradingplus.live, poses a high-risk brand impersonation threat targeting individuals seeking AI-assisted trading opportunities. The site falsely presents itself as an official platform for automated investment services, likely designed to harvest credentials, financial details, or deploy fraudulent investment schemes. The page title, 'funded trading plus | Official Platform for AI Assisted Trading,' explicitly mimics legitimate trading service branding to deceive users into engaging with malicious infrastructure.

Analysis of the domain reveals multiple technical indicators of compromise. The domain was registered on June 12, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with abusive registrations. It resolves to the IP address 104.21.23.190, hosted on Cloudflare's network (AS13335), which is commonly used to obfuscate malicious infrastructure. VirusTotal reports 3 out of 95 security vendors flagging this domain as malicious, and it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as encrypted connections are routinely exploited in phishing campaigns.

Users who have visited fundedtradingplus.live should take immediate remedial action. If credentials or financial information were entered, affected accounts must be secured by resetting passwords and enabling multi-factor authentication where available. Financial institutions should be notified to monitor for unauthorized transactions. Devices used to access the domain should undergo a full security scan to detect potential malware or backdoors. Additionally, users are advised to report the domain to their organization's security team or relevant authorities to aid in takedown efforts and prevent further victimization.