Checked 09.08.2026 Ref E359075E

MALICIOUS — CRITICAL

lornumerique[.]live

This domain, lornumerique.live, is identified as a generic phishing infrastructure targeting users of AI-assisted trading platforms.

100/100 evidence score · Critical

VirusTotal: 19/91
Blocklists: No stored match
Kullanılabilirlik: Bilinen son aktif · HTTP 200

Report / Add Evidence Appeal this listing

Stored screenshot of lornumerique.live — 2026-06-24 08:20 UTCBilinen son aktif · HTTP 200

View full size Wayback İndir

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-06-01 00:42:50 UTC. The recorded recipient is abuse@identitydigital.com. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

2 months

Reports sent

Latest case ID

PD-20260601-03A386

Current status

HTTP 200 at latest stored check

Jump to section

Rapor özeti

lornumerique.live — Bilinen son aktif (HTTP 200). Dolandırıcılık türü: Fake Exchange. Kanıt özeti: VirusTotal 19/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, CRDF); URLQuery 1 det.; Spamhaus DBL_PHISH; PhishDestroy score 100/100. Kayıt kuruluşu: NiceNIC.

Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.

Evidence Analysis

Stored AI analysis · 26.06.2026

Ref E359075E

This domain, lornumerique.live, is identified as a generic phishing infrastructure targeting users of AI-assisted trading platforms. Analysis of the page title, 'L’Or Numérique | Official Platform for AI Assisted Trading,' indicates an attempt to impersonate a legitimate trading service, likely to harvest credentials or distribute fraudulent investment schemes. No specific drainer kit signatures were confirmed, but the domain exhibits characteristics consistent with brand impersonation and credential theft operations. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 8 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 26, 2024, and resolves to the IP address 104.21.9.129. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains due to its accessibility and automation. As of the latest assessment, lornumerique.live has been taken offline, reducing immediate exposure risks. However, the infrastructure may resurface under a different domain or IP address, given the transient nature of phishing operations. Users who interacted with this domain should assume potential credential compromise and monitor for unauthorized access to financial or trading accounts. Organizations are advised to update blocklists with the provided indicators and conduct retrospective log analysis for connections to the domain or associated IP address.

VirusTotal

19 det.

URLQuery

1 det.

DNS Security

3/14

URLScan

Rapor ↗

TLS sertifikası

Let's Encrypt

Yaş

2 mo New

Gözlemlenen durum

Bilinen son aktif 200

DestroyList

Listede

Reports Sent

Veri kapsamı12 recorded checks

VirusTotal 19 / 91 URLQuery 1 det. PhishStats kontrol edilmedi OTX no community references CF Radarı no data URLScan capture saklanan rapor URLScan verdict Analiz tamamlandı DNS engellemeleri 3/14 TLS valid certificate, 59d WHOIS 2 mo old Ekran görüntüsü 3 captures · 3 sources Yönlendirme zinciri araştırılmadı

Ağ Güvenliği İstihbaratı Registrar context

DNS Provider Blocks 3 / 14

Controld Adblock Controld Family Controld Malware

Registrar context NiceNIC

Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.

NiceNIC Verdict Full Investigation

Tehdit Müdahale Pipeline

Keşif

Checks

Reports

Kullanılabilirlik

14/15

URLScan.io Capture

Stored URLScan report with capture artifacts

24.06.2026

URLScan Verdict

URLScan analizi tamamlandı; bu web yakalama sonucu sayfa tehdidi kararını değiştirmez · score 0

29.07.2026

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

VirusTotal

19/91 recorded on VirusTotal

28.07.2026

Google Safe Browsing

Checked via Google Şeffaflık Raporu

26.06.2026

DNS Security Blocks

Blocked by 3 of 14 checked DNS providers: Controld adblock, Controld family, Controld malware

Registrar Context: NiceNIC

Separate registrar research is available. Registrar association is contextual and is not scored as an independent detection.

robots.txt Found

A valid robots.txt was observed; no disallowed/allowed paths were extracted

09.08.2026

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

24.06.2026

Technical Analysis Recorded

Rapor, depolanan teknolojiyi veya adli analiz sonuçlarını içerir.

09.08.2026

VT detections increased by 7

+7 new detections (1 → 8): ADMINUSLabs, CRDF, G-Data, Gridinsoft +3

26.06.2026

Sent Report Recorded

Stored sent-report record for registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, hosting provider, 1 abuse contact

abuse@nicenic.net

01.06.2026

Genel Engelleme Listesi Durumu

Kaydedilen görüntü

Screenshot of lornumerique.live — **Primary capture**2026-06-24 08:20 UTC 1 / 3

Tam boyutta görüntüle Wayback İndir

Sayfa başlığı

L’Or Numérique | Official Platform for AI Assisted Trading

TLS sertifikası

Valid transport encryption · Düzenleyen Let's Encrypt · valid for 59 days

Etki Alanı Analizi

Alan adı

URLScan Verdict Analiz tamamlandı score 0 report ↗

Sunucu / ASN cloudflare · AS13335 CLOUDFLARENET - Cloudflare, Inc., US

IP Context Cloudflare shared edge origin IP hidden Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.

Kayıt kuruluşu NiceNIC

(RU) PhishDestroy Investigation

Kötüye kullanım iletişim bilgisiabuse@nicenic.net

ICANN Kayıt KuruluşuICANN tarafından resmi olarak akredite edilmiş kayıt kuruluşları →

WHOIS Aramalornumerique.live için ICANN RDAP →

IP adresi 104.21.9.129 CDN

Coğrafi konum

San Francisco, US

AğAS13335 · Cloudflare, Inc.

Ters IP sorgusuviewdns.info → rapiddns.io →

Kaynak IP, bir CDN proxy'sinin arkasına gizlenir. Uç adresine ilişkin Ters IP sonuçları ilgisiz kiracılar içerir; Kaynağı bulmak için pasif DNS veya sertifika şeffaflığı verileri gerekir.

KayıtOluşturuldu 26.05.2026 (74d · New) — Expires 26.05.2027

Elapsed Since First Report 16 days

Neyi ölçüyoruz Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Bilinen son aktif.

Her raporun içeriği Saklanan giden rapor kayıtları, satıcı kararları, kayıt verileri, barındırma ayrıntıları, sınıflandırmalar veya ekran görüntüleri gibi o sırada mevcut olan kanıtlara referans verebilir. Bu sayfa, teslim edilen yükün, alındığının, onaylandığının veya alıcının yaptığı eylemin tam olarak ne olduğu konusunda bir sonuç çıkarmaz.

HTTP Durumu200

Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları

İlk Kez Tespit Edildi01.06.2026

DOM Analysisanalyzed 01.06.2026score 78/100

IoC Extractionscanned 29.07.20260 wallet · 0 Telegram IoCs

Submitted URLhttps://lornumerique.live/

Ad sunucularıadrian.ns.cloudflare.comrohin.ns.cloudflare.com

TLS Fingerprint

TLS Observationvalid from 26.05.2026scanned 01.06.2026

Favicon Hash

Case ID

ICANN OVERSIGHT

Akreditasyon ve RAA bağlamı

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasyon bir sözleşmedir, güvenlik mührü değil. ICANN ücretlerini doğrulayın RAA §3.18'i okuyun PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft Hiçbir şey otomatik olarak gönderilmez.

Latest Classified Outcome 2026-08-09 02:44:27 UTC

Primary outcome Live content reason: Ordinary HTTP content served 90% confidence

Attribution source: Current Http Probe

Evidence layers Availability: Content serving Content: Content served at root DNS: Resolved Registration: Active

Latest HTTP observation Live content Ordinary HTTP content served 90% 2026-08-09 02:44:27 UTC

RDAP registration Etkin NICENIC INTERNATIONAL GROUP CO., LIMITED · IANA 3765 RDAP HTTP 200 source: Rdap Status Collector clientDeleteProhibitedclientTransferProhibited expires 2027-05-26 17:30:20 UTC checked 2026-08-08 04:41:09 UTC

Observed timeline last reachable: 2026-08-09 02:44:27 UTC last content: 2026-08-09 02:44:27 UTC

Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.

Bu Alan Adını Bildir Kanıt sunun ve başkalarını korumaya yardımcı olun

VirusTotal Analizi

19 / 91 güvenlik sağlayıcıları bu alanı işaretledi

View on VT

Last analyzed 2026-07-28 05:03:25 UTC Previous stored snapshot: 8 detections

ADMINUSLabs

alphaMountain.ai

BitDefender

Cluster25

CRDF

CyRadar

ESET

Emsisoft

Forcepoint ThreatSeeker

Fortinet

G-Data

Gridinsoft

Kaspersky

Lionic

Seclookup

SOCRadar

Sophos

VIPRE

Webroot

Site Performans Analizi

Google PageSpeed Insights — mobile performance audit of lornumerique.live · checked Jun 26, 2026

Needs Work

Performance

FCP

2.74s

First Contentful Paint

LCP

3.32s

Largest Contentful Paint

CLS

0.053

Cumulative Layout Shift

TBT

0ms

Total Blocking Time

2.74s

Speed Index

Site Yapılandırma Analizi

Stored observations are retained with their original collection time.

robots.txt Present · HTTP 200

Valid robots.txt; no Disallow/Allow paths were extracted.

Kanıtlar ve Dış RaporlarIndependent lookups and source reports

Güvenlik Analizi

URLScan Analyzed VirusTotal 19 det. ChainPatrol URLQuery 1 det. Gridinsoft SSL Laboratuvarlar Stored TLS valid CF Radarı Open report DNS Security 3/14 WOT ScamAdviser Kara Liste Kontrol Aracı URLVoid Sucuri SiteCheck MDN Gözlemevi

Submitted Evidence Snapshot

Sent: 2026-06-01 00:42:50 UTC Ledger records: 1 Case ID: PD-20260601-03A386 Recipient: abuse@identitydigital.com

Page title stored with report: L’Or Numérique | Official Platform for AI Assisted Trading

URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 196.2 KB

OSINT ve İstihbarat

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Kayası Sign-in search IntelX crt.sh Sertifikalar WHOIS Wayback

DNS ve Ağ

nslookup.io DNS bgp.tools ASN /Güzergâh

SEO ve Alan Adı

SpyFu Moz DA/PA Ahrefs Geri bağlantılar Derinlemesine Analiz

Victim safety and official reportingImmediate actions and verified reporting channels

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.

FBI IC3

Amerika Birleşik Devletleri'nde internet bağlantılı suçları bildirin

Federal tips line1-800-CALL-FBI

Europol

AB ülkeniz için resmi raporlama kanalını bulun

National police directory

Action Fraud

İngiltere, Galler ve Kuzey İrlanda'da dolandırıcılık ve siber suçları bildirin

Contact centre0300 123 2040

PhishDestroy listing review Bir kolluk kuvveti raporu değil

Alan Adı İtirazı

Bu alanın sahibiyseniz ve girişin hatalı olduğunu düşünüyorsanız inceleme isteğinde bulunun

Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →

Yerel Yetkililere Bildirin

resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.

97 ülke rehberi

Yapay zeka destekli taslak — olay ayrıntıları yapay zeka sağlayıcısı tarafından işlenir Kendiniz inceleyin ve gönderin

Bu Raporu YerleştirRead-only HTML widget

HTML · IFRAME

Bu Raporu Yerleştir

Bu tehdit bilgisini web sitenizde veya blogunuzda paylaşın

embed.html

<iframe
  src="https://phishdestroy.io/tr/embed/domain/lornumerique.live"
  title="PhishDestroy threat report for lornumerique.live"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>