stop-lohotronshiki[.]com

The domain stop-lohotronshiki.com was registered on June 5, 2026 and is currently resolved to the IP address 62.60.226.89. It is hosted under the name servers ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, which are typical of services used for fast‑flux and disposable hosting. Registration was processed through Fewmoretaps OU d/b/a Trustname.com, a registrar that has appeared in other malicious campaigns. VirusTotal has flagged the domain in 2 of 95 security vendor scans, indicating that at least a small subset of analysis engines have identified malicious characteristics. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing its classification as a phishing vector. No additional evidence such as SSL certificates, HTTP response codes, page titles, or brand targeting has been released, so the precise content and attack surface remain unverified. Defenders should treat stop-lohotronshiki.com as high‑risk: block outbound connections to its IP, add the domain to URL filtering and email security policies, monitor DNS queries for resolution to 62.60.226.89, and consider extending blocklist coverage to include the associated name servers. Continuous re‑evaluation is advised in case new indicators, such as additional vendor detections or content analysis, become available.