lotech-global[.]cc

Analysis of lotech-global.cc shows a newly registered domain (creation date June 27, 2026) that is actively used in a generic phishing campaign. The domain is registered through NameSilo, LLC and resolves to the IPv4 address 198.27.109.52. Its authoritative name servers are ns3.ddoscure.com, ns4.ddoscure.com, ns5.ddoscure.com, ns6.ddoscure.com, and protected3.d, indicating a hosting configuration that leverages the ddoscure DNS infrastructure. The domain appears on a single security blocklist and is currently blocked by the PhishDestroy service, confirming that at least one external threat‑intelligence source has taken mitigation action.

VirusTotal scans have yielded four detections out of ninety‑one security vendors, providing additional evidence that the domain is associated with malicious activity. No public SSL certificate details, HTTP status codes, or page‑title information are available in the supplied intelligence, so the exact content served by the site remains unverified. The lack of broader blocklist coverage suggests that detection may be emerging, but the existing indicators are sufficient to classify the domain as high‑risk. Defenders should immediately add lotech-global.cc to outbound filtering rules, DNS sinkhole lists, and host‑based allow/deny configurations.

Continuous monitoring of the associated IP address (198.27.109.52) and the ddoscure name‑server cluster is advised to detect any further infrastructure changes. Organizations using web‑proxy or secure web‑gateway solutions should ensure that requests to this domain are blocked and that logs are reviewed for any attempted connections. Given the recent registration date and the active detection signals, proactive containment is recommended to prevent credential‑harvesting attempts from reaching end users.