swapdexairpro-ai[.]fyi

The domain swapdexairpro-ai.fyi was registered on April 14, 2026 through Epik LLC and resolves to the IP address 209.196.146.115, which is geolocated to the United States and associated with the same registrar. DNS is served by ns3.epik.com and ns4.epik.com. The site presents a valid HTTPS certificate issued by Let’s Encrypt (R12) and returns HTTP 200 responses. Automated analysis detects PHP, Ubuntu, and Nginx as the underlying technologies. VirusTotal records indicate that 21 of 94 security vendors have flagged the domain, and it is currently blocked by PhishDestroy and listed on one public blocklist. Reputation services assign extremely low scores: Gridinsoft 0/100 and Scamadviser 1/100. The page title returned by the server is "swapdexairpro-ai.fyi - contact with domain owner | Epik.com," suggesting a registrar‑owned placeholder page rather than a user‑generated landing site. Intelligence categorizes the activity as a "Fake Exchange" operation, implying attempts to deceive victims into interacting with a counterfeit financial‑exchange interface, though the specific brand or lure has not been observed in the available data. The risk level is assessed as high and the domain remains active. Defenders should prioritize blocking the domain at perimeter firewalls, updating DNS sinkhole feeds, and monitoring for any outbound connections to the associated IP. Continuous re‑evaluation is recommended, as the site content has not been publicly captured; any emergence of credential‑capture forms or payment‑request pages would warrant immediate incident response actions.