lovofx[.]com

This domain, lovofx.com, is actively flagged as a high-risk phishing site targeting forex trading credentials. As of July 27, 2026, the domain returns an HTTP 200 status, indicating an operational web server. It is currently listed on one security blocklist, specifically PhishDestroy, and has been detected by 3 of 91 security vendors on VirusTotal. Infrastructure analysis reveals the domain is registered through GoDaddy.com, LLC, with nameservers hosted by DreamHost (ns1.dreamhost.com, ns2.dreamhost.com, ns3.dreamhost.com).

No additional details regarding the specific phishing kit, targeted brand, or exact page content are available at this time, though the domain name suggests a focus on financial or forex-related fraud. Defenders should treat this domain as malicious and prioritize blocking it at the network and endpoint levels. The combination of an active HTTP response, blocklist presence, and vendor detections confirms ongoing phishing activity.

Further investigation into associated IP addresses, SSL certificates, and hosting patterns may reveal additional infrastructure linked to this campaign. Given the domain's registration and nameserver details, monitoring for newly registered domains under the same registrar or hosting provider could help identify related threats. If internal logs indicate user exposure, initiate credential reset procedures for potentially compromised accounts.