This domain, trustlottery.cfd, was registered on July 28, 2026, through Fewmoretaps OU d/b/a Trustname.com and remains active as of July 31, 2026. Infrastructure analysis reveals it resolves to IP address 172.67.155.178 and utilizes Cloudflare nameservers (aliza.ns.cloudflare.com and jasper.ns.cloudflare.com). The domain appears on one security blocklist and is currently blocked by PhishDestroy, though no additional context regarding the nature of the block is provided. VirusTotal scans conducted by 91 vendors returned no detections as of the report date, though the absence of flags does not confirm the domain's legitimacy.
No further details regarding the site's content, brand impersonation, or specific phishing kit are available at this time, as the exact nature of the threat remains under investigation. The domain's registration age (three days at the time of reporting) and use of Cloudflare infrastructure are consistent with patterns observed in phishing campaigns, where newly registered domains and proxy services are frequently employed to evade detection. Defenders are advised to treat this domain as potentially malicious until further evidence emerges.
Monitoring for additional blocklist inclusions, changes in resolution, or shifts in detection status may provide clarity on its intent. Organizations should consider implementing network-level blocks for 172.67.155.178 and the domain itself, particularly if internal telemetry indicates connections to it. No brand association or specific scam category has been confirmed, so generic phishing detection rules should be applied.