lugang[.]biz

This domain is flagged as a high-risk generic phishing threat based on multiple indicators. The domain lugang.biz was registered on March 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with low-effort or disposable domain registrations. It resolves to IP address 91.206.71.133, hosted in the Netherlands by Walker Web Development Services, and uses Cloudflare nameservers (david.ns.cloudflare.com, dina.ns.cloudflare.com) and a Cloudflare technology stack, which may obscure the true origin server. The page title displayed is 'Вы не робот?' (Russian for 'You are not a robot?'), a common tactic in phishing campaigns to present a fake CAPTCHA verification, often used to collect credentials or bypass automated analysis. The domain has an SSL certificate issued by Google Trust Services (WE1). Currently, the domain is active and responding with HTTP status 200. Threat intelligence sources show limited coverage: one security blocklist lists the domain, and VirusTotal reports a detection rate of 1 out of 94 security vendors flagging it as malicious. The Gridinsoft trust score is 0 out of 100, indicating high suspicion. The domain is blocked by the PhishDestroy feed. Defenders should treat this domain as compromised and block access at the network or email gateway level. Users encountering this domain should not interact with any presented forms or prompts. The exact phishing payload or targeted brand has not been identified from available data, so ongoing monitoring is recommended. Given the low detection count, additional analysis of the hosted content or network traffic may be warranted to confirm the attack vector and update detection signatures.