Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 1. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

lagofastbooster[.]ru

“[Официальный]LagoFast Game Booster—отсутствие лагов и снижение пинга в каждой игре”

Threat verdict High 55/100 evidence score
Availability Unverified Current reachability is unverified
VirusTotal detections: 1/93 Brand impersonation: Fortnite
Dec 25, 2025 Fortnite
Evidence Summary
HIGH
Ref
222455F8
Score
55/100

The domain www.lagofastbooster.ru was registered through RU-CENTER-RU on October 31, 2024 and is presently taken offline. Technical fingerprinting shows a modern web stack: Node.js, React, Next.js, Ant Design, Envoy, Nginx, Google Sign‑in integration and Yandex.Metrika analytics. The site served content over HTTPS using a Let’s Encrypt certificate (CN = E8) and responded with HTTP 200 before being seized. The page title “[Официальный]LagoFast Game Booster—отсутствие лагов и снижение пинга в каждой иг” indicates a claim of performance‑boosting software, while the listed brand target is Fortnite, confirming a brand‑impersonation intent.

The hosting resolves to IP 155.102.130.189, which belongs to AS24429 Zhejiang Taobao Network Co.,Ltd in the United States. The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 93 security vendors, and Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious classification.

Nameservers are hosted on Yandex Cloud (ns1.yandexcloud.net, ns2.yandexcloud.net). While the offline status limits real‑time observation, the combination of brand‑specific title, low trust score, and vendor flagging provides sufficient confidence to label the infrastructure as a phishing kit targeting Fortnite players. Defenders should block the domain and its resolved IP at perimeter filters, monitor for any resurgence of the host under the same ASN, and enforce credential‑security policies for Fortnite accounts, especially those involving third‑party login flows that could be abused by similar impersonation sites.

VirusTotal
VirusTotal
1 det.
URLScan
URLScan
TLS Certificate
Expired or unverified -104d
Age
1.8 yr
Observed status
Unverified
PhishDestroy
DestroyList
Listed
Data coverage VirusTotal 1 / 93 URLQuery report stored — detailed verdict pending PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks not checked TLS Expired or unverified WHOIS 22 mo old Screenshot 2 captures · 2 sources Redirect chain not probed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
16/18

Public Blocklist Status

Stored Capture

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN Tengine · AS24429 TAOBAO Zhejiang Taobao Network Co.,Ltd, CN
IP Reputation abuse score 0/100 0 reports checked Jul 27, 2026
IP Address 155.102.130.189 US
GeoUS Virginia Beach, US
NetworkAS24429 · Zhejiang Taobao Network Co.,Ltd
RegistrationCreated Oct 31, 2024 Expires Dec 1, 2026
Elapsed Since First Report 81 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Unverified.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedDec 25, 2025
DOM Analysisanalyzed Mar 11, 2026score 10/1007 brand signals
IoC Extractionscanned Aug 2, 20260 wallet · 0 Telegram IoCs
Submitted URLhttps://www.lagofastbooster.ru/?… query redacted
Nameserversns1.yandexcloud.netns1.yandexcloud.net.ns2.yandexcloud.netns2.yandexcloud.net.
TLS Fingerprint
TLS Observationvalid from Feb 1, 2026scanned Mar 12, 2026
Favicon Hash
Page Title
[Официальный]LagoFast Game Booster—отсутствие лагов и снижение пинга в каждой игре
Impersonates
Fortnite League Of Legends Playstation Roblox Steam Valorant Xbox
TLS Certificate
Expired or unverified · Issued by Let's Encrypt / E8
Technologies · 13 identified
Node.js
Programming languages

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

nodejs.org 100% confidence
Google Sign-in
Authentication

Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.

developers.google.com 100% confidence
Envoy
Reverse proxies

Envoy is an open-source edge and service proxy, designed for cloud-native applications.

www.envoyproxy.io 100% confidence
Ant Design
UI frameworks

Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.

ant.design 100% confidence
React
JavaScript frameworks

React is an open-source JavaScript library for building user interfaces or UI components.

reactjs.org 100% confidence
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org 100% confidence
Next.js
JavaScript frameworks Web frameworks

Next.js is a React framework for developing single page Javascript applications.

nextjs.org 100% confidence
Yandex.Metrika
Analytics

Yandex.Metrica is a free web analytics service that tracks and reports website traffic.

metrika.yandex.com 100% confidence
reCAPTCHA
Security

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

www.google.com 100% confidence
Microsoft Advertising
Advertising

Microsoft Advertising is an online advertising platform developed by Microsoft.

ads.microsoft.com 100% confidence
Google Analytics
Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

google.com 100% confidence
Facebook Pixel
Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

facebook.com 100% confidence
Webpack
Miscellaneous

Webpack is an open-source JavaScript module bundler.

webpack.js.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

1 / 93 security vendors flagged this domain
View on VT
Last analyzed
SOCRadar

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive

Evidence & External Reports

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/lagofastbooster.ru"
  title="PhishDestroy threat report for lagofastbooster.ru"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>