lagofastbooster[.]ru

The domain www.lagofastbooster.ru was registered through RU-CENTER-RU on October 31, 2024 and is presently taken offline. Technical fingerprinting shows a modern web stack: Node.js, React, Next.js, Ant Design, Envoy, Nginx, Google Sign‑in integration and Yandex.Metrika analytics. The site served content over HTTPS using a Let’s Encrypt certificate (CN = E8) and responded with HTTP 200 before being seized. The page title “[Официальный]LagoFast Game Booster—отсутствие лагов и снижение пинга в каждой иг” indicates a claim of performance‑boosting software, while the listed brand target is Fortnite, confirming a brand‑impersonation intent.

The hosting resolves to IP 155.102.130.189, which belongs to AS24429 Zhejiang Taobao Network Co.,Ltd in the United States. The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 93 security vendors, and Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious classification.

Nameservers are hosted on Yandex Cloud (ns1.yandexcloud.net, ns2.yandexcloud.net). While the offline status limits real‑time observation, the combination of brand‑specific title, low trust score, and vendor flagging provides sufficient confidence to label the infrastructure as a phishing kit targeting Fortnite players. Defenders should block the domain and its resolved IP at perimeter filters, monitor for any resurgence of the host under the same ASN, and enforce credential‑security policies for Fortnite accounts, especially those involving third‑party login flows that could be abused by similar impersonation sites.