MALICIOUS — CRITICAL
lagospulsefx[.]live
This domain, lagospulsefx.live, was registered on 2026-05-07 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the Cloudflare edge address 172.67.167.30, which geolocates to Canada.
- VirusTotal
- 18/91
- Blocklists
- No stored match
- التوفر
- آخر نشاط معروف · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@identitydigital.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
lagospulsefx.live — آخر نشاط معروف (HTTP 200). نوع الاحتيال: Investment Scam. ملخص الأدلة: VirusTotal 18/91 (alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Cluster25, CRDF); URLQuery 1 det.; Spamhaus DBL_PHISH; PhishDestroy score 100/100. مسجّل النطاق: NiceNIC.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
This domain, lagospulsefx.live, was registered on 2026-05-07 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the Cloudflare edge address 172.67.167.30, which geolocates to Canada. The site presents the title “LagosPulse FX | Official Platform for AI Assisted Trading” and is served over HTTPS using a Let’s Encrypt certificate (E7). DNS is hosted on Cloudflare name servers hal.ns.cloudflare.com and jocelyn.ns.cloudflare.com, and the HTTP response returns status 200 with HTTP/3 enabled. Automated analysis identified the use of common front-end libraries such as jQuery, Unpkg, and jsDelivr, as well as Cloudflare Browser Insights and IPinfo scripts. The Gridinsoft trust score is 0 / 100, indicating a high likelihood of malicious intent. VirusTotal scans reported 6 of 91 security vendors flagging the domain, and the domain is listed on at least one public blocklist, with PhishDestroy already enforcing a block. The intelligence classifies the activity as a high‑risk generic phishing campaign targeting investors, leveraging the “investment scam” label. While the page content has not been manually inspected, the combination of a newly created domain, low trust score, vendor detections, and active blocklist listings provides sufficient evidence for remediation. Defenders should block the domain at network perimeter, add the IP address 172.67.167.30 to deny lists, and monitor for any related C2 infrastructure that may reuse the same Cloudflare edge. Ongoing observation is advised to detect potential re‑hosting on alternative IPs or registrars.
نطاق تغطية البيانات13 recorded checks
استخبارات أمن الشبكات Registrar context
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:44:21 UTC
المراجع المتقاطعة لاستخبارات التهديدات · source references
التقنيات · 7 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com ثقة 100٪jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com ثقة 100٪Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com ثقة 100٪Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
الأدلة المؤرشفة
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of lagospulsefx.live · checked Jun 26, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260515-97E1F2 Recipient: abuse@identitydigital.com Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.