latticeprimetech[.]com

This investigation examines latticeprimetech.com, a domain created on 2026-03-06 and currently taken offline. The domain is hosted behind Cloudflare (AS13335) and resolves to 188.114.96.3, a Cloudflare edge address located in the United States. Registration was performed through Gname.com Pte. Ltd., and the authoritative nameservers are christina.ns.cloudflare.com and jeff.ns.cloudflare.com. The site presented the page title “Lattice Structure|Login”, indicating a credential‑phishing intent, which aligns with the classified scam type of Credential Phishing.

VirusTotal has scanned the domain with 94 anti‑malware vendors; none reported a detection, but the absence of detections does not constitute evidence of benign behavior. The TLS certificate is issued by Google Trust Services under the WE1 leaf, confirming the use of a valid HTTPS certificate. The domain appears on three external blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reflecting recognition by multiple threat‑intelligence feeds. At the time of analysis the site returned no HTTP response because it was offline, and no additional artifacts such as phishing landing‑page HTML or credential‑harvesting scripts have been collected.

Consequently, the full scope of the phishing campaign, including target audience, lure vectors, and any associated command‑and‑control infrastructure, remains unknown. Defenders should immediately add latticeprimetech.com to URL filtering and DNS sinkhole policies, treat any future resolution to the same IP as suspicious, and continue monitoring for re‑appearance or related domains using the same registrar or nameserver pattern. Email security gateways should be tuned to flag messages that reference “Lattice Structure” or contain login‑prompt language targeting the same brand, even though the brand is not explicitly identified. Continuous re‑scanning on VirusTotal and periodic checks against blocklist feeds are advised to capture any later detections.