poslive888[.]vip

This domain was registered on February 21 2026 through Domain International Services Limited and currently resolves to IP address 104.21.51.165 hosted on AS13335 Cloudflare in the United States. Nameservers raquel.ns.cloudflare.com and gabriel.ns.cloudflare.com are in use along with an SSL certificate issued by Google Trust Services under the WE1 profile. The site remains active with HTTP status 200 and employs technologies including Vue.js, Cloudflare Browser Insights, Cloudflare, and HTTP/3. Its page title explicitly references a Blockchain Investment Project Website focused on financial freedom, aligning with the documented cryptocurrency scam classification.

Infrastructure analysis reveals one security blocklist entry and explicit blocking by PhishDestroy while VirusTotal reports a single detection out of 95 vendors and Gridinsoft assigns a trust score of zero out of one hundred. The combination of a cryptocurrency-themed landing page, recent registration relative to the July 2026 report date, and Cloudflare-hosted infrastructure with minimal vendor detections forms the primary observable threat indicators. No additional ASN or brand-specific details beyond the listed elements are available to expand the profile.

What remains uncertain is the precise operational duration of any underlying campaign and whether the domain has been reused across multiple cryptocurrency schemes beyond the single flagged instance. The low detection count on VirusTotal does not contradict the blocklist presence or the explicit scam-type designation in the available intelligence. Defenders should treat the domain as high-risk based on the combined blocklist and scam classification, incorporate the exact IP 104.21.51.165 and nameservers into existing filters, and monitor for any additional resolutions or page-title changes that could indicate campaign evolution.