latticegridtech[.]vip

On 24 July 2026 analysts observed that the domain latticegridtech.vip is associated with a credential phishing campaign targeting users of a service referenced in its page title as “Lattice Structure”. The site was registered on 6 March 2026 through Gname.com Pte. Ltd. and is currently hosted behind Cloudflare infrastructure, resolving to IP address 188.114.96.3 which belongs to ASN 13335 (Cloudflare, Inc.) located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS endpoint but not providing any indication of malicious intent. Nameservers for the zone are jeff.ns.cloudflare.com and christina.ns.cloudflare.com, both standard Cloudflare authoritative servers.

The domain has been listed on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and the SEAL blocklist, confirming that at least multiple downstream filters have identified it as malicious. VirusTotal recorded scans from ninety‑four AV engines; none flagged the domain at the time of analysis, but the absence of detections does not constitute a safety assurance. The HTTP response observed prior to takedown returned a 200 OK status with the HTML title “Lattice Structure|Login”, matching the credential‑phishing classification supplied in the intelligence brief. As of the reporting date the site is taken offline, and no further content is reachable.

However, the underlying infrastructure—Cloudflare edge nodes and a Google‑issued certificate—remains reusable for future campaigns. Defenders should continue to block the domain at perimeter filters, monitor for any re‑registration of the same second‑level domain or similar naming patterns, and consider adding the associated IP address to threat‑intel feeds.