amparadapp[.]live

Analysis of the domain amparadapp.live indicates it was actively flagged as an investment scam prior to being taken offline. The domain resolved to IP address 104.21.24.237, hosted on Cloudflare infrastructure (AS13335) in the United States. No SSL certificate was detected, increasing the risk of unencrypted data transmission. Registration was handled through Global Domain Group LLC, with Cloudflare nameservers (elisa.ns.cloudflare.com and paul.ns.cloudflare.com) managing DNS resolution.

Security vendors and blocklists provided consistent warnings: 17 of 95 detection engines on VirusTotal flagged the domain as malicious, while five independent security blocklists—including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—listed it as a threat. AlienVault OTX also recorded the domain in a threat intelligence pulse, corroborating its association with fraudulent activity. The scam type was explicitly classified as an investment scam, though the specific brand or platform being impersonated remains unconfirmed due to the lack of page content analysis. Defenders should treat this domain as compromised and avoid any interaction.

Network-level blocking of the resolved IP (104.21.24.237) and monitoring for related Cloudflare-hosted domains using the same registrar or nameserver patterns is recommended. Since the domain is currently offline, further forensic analysis may be limited, but historical logs should be reviewed for prior connections. No evidence suggests this domain was part of a larger phishing kit or campaign, but its presence on multiple blocklists indicates a deliberate attempt to deceive users.