sterkebetalholm[.]live

This domain is flagged as an elevated-risk phishing infrastructure specifically targeting users of AI-assisted trading platforms. Analysis indicates it impersonates a legitimate financial technology service under the guise of "Sterke Betalholm | Official Platform for AI Assisted Trading," a fabricated brand identity designed to deceive victims into disclosing credentials or depositing funds. Infrastructure analysis reveals the domain sterkebetalholm.live was registered on May 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious registrations. It resolves to the IP address 188.114.96.3 and employs a Let's Encrypt SSL certificate, which provides encryption but does not validate legitimacy. The domain appears on two security blocklists: PhishDestroy and OISD. Detection engines on VirusTotal flagged the domain as malicious, with 5 out of 95 security vendors confirming its phishing nature. Additionally, Gridinsoft assigned a trust score of 0 out of 100, further corroborating its fraudulent intent. To mitigate risks associated with this phishing threat, organizations should immediately block the domain sterkebetalholm.live and its resolving IP address 188.114.96.3 at the network perimeter. Security teams are advised to monitor for any attempts to access the domain from internal networks and investigate potential exposure. End-users should be educated on recognizing phishing indicators, particularly unsolicited communications promoting AI-assisted trading platforms. Financial institutions and trading services should proactively warn customers about this specific impersonation campaign and implement multi-factor authentication to reduce credential theft risks. Given the domain's current offline status, continuous monitoring for reactivation or related infrastructure is recommended.