lottovzla[.]online

lottovzla.online is an active domain created on May 19, 2026 and registered through Ultahost, Inc. The domain resolves to the IPv4 address 159.100.6.19, which is geolocated to Germany and associated with the same provider. Authoritative nameservers ns1‑ns4.ultahost.com are configured, and the MX record points to lottovzla.online with priority 0, indicating the domain also handles email traffic.

Web analysis shows the site returns an HTTP 301 redirect and serves a page titled “Lotto Vzla — Resultados & Proyecciones”. The TLS certificate is issued by Let’s Encrypt (R12) and matches the domain name, confirming the site is reachable over HTTPS. Gridinsoft assigns a trust score of 1 out of 100, reflecting a high likelihood of malicious use. No additional content beyond the title was observed during the brief fetch, consistent with a generic phishing landing page that may redirect victims to credential‑harvesting forms.

The domain appears on one security blocklist and is flagged by PhishDestroy. VirusTotal reports that 3 of 95 scanned security vendors have identified the domain as malicious, and AlienVault OTX includes it in a single threat pulse. These independent detections corroborate the classification of the site as a generic phishing infrastructure targeting users interested in lottery results.

Open questions remain regarding the specific phishing kit, the targeted brand, and the extent of victim data collection, as no payload or form details were captured. Defenders should block DNS resolution and HTTP/S traffic to 159.100.6.19, enforce email filtering for messages originating from the domain, and monitor for similar Let’s Encrypt‑issued domains registered through Ultahost in the same timeframe. Continuous threat‑intel feeds should be consulted for any updates to the blocklist status or additional indicators of compromise.