lagospulsefx[.]live

This domain, lagospulsefx.live, was registered on 2026-05-07 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the Cloudflare edge address 172.67.167.30, which geolocates to Canada. The site presents the title “LagosPulse FX | Official Platform for AI Assisted Trading” and is served over HTTPS using a Let’s Encrypt certificate (E7). DNS is hosted on Cloudflare name servers hal.ns.cloudflare.com and jocelyn.ns.cloudflare.com, and the HTTP response returns status 200 with HTTP/3 enabled. Automated analysis identified the use of common front-end libraries such as jQuery, Unpkg, and jsDelivr, as well as Cloudflare Browser Insights and IPinfo scripts. The Gridinsoft trust score is 0 / 100, indicating a high likelihood of malicious intent. VirusTotal scans reported 6 of 91 security vendors flagging the domain, and the domain is listed on at least one public blocklist, with PhishDestroy already enforcing a block. The intelligence classifies the activity as a high‑risk generic phishing campaign targeting investors, leveraging the “investment scam” label. While the page content has not been manually inspected, the combination of a newly created domain, low trust score, vendor detections, and active blocklist listings provides sufficient evidence for remediation. Defenders should block the domain at network perimeter, add the IP address 172.67.167.30 to deny lists, and monitor for any related C2 infrastructure that may reuse the same Cloudflare edge. Ongoing observation is advised to detect potential re‑hosting on alternative IPs or registrars.