hilltechglobal[.]com

hilltechglobal.com was registered on February 21, 2026 through the registrar Sav.com, LLC. The domain resolves to the IPv4 address 107.172.61.186, which is hosted by HostPapa (ASN 36352) in the United States. DNS resolution is delegated to ns1.korrectserver.com and ns2.korrectserver.com. The site presented a TLS certificate issued by Let’s Encrypt (R13) and supported HTTP/3 over a LiteSpeed web server, indicating a relatively modern web stack. VirusTotal analysis shows that two of ninety‑three scanned security vendors flagged the domain as malicious, and the domain is listed on a single external blocklist.

PhishDestroy has also added the domain to its blocklist, confirming that it has been observed in phishing campaigns. The page title returned by the server is “hilltechglobal.com”, and no additional content has been captured. As of the report date, the site is reported offline, and no HTTP response body is available for further inspection. The available evidence points to an infrastructure typical of generic phishing operations: a freshly registered domain, inexpensive shared hosting, and the use of a free TLS certificate to lend legitimacy.

However, the lack of active content prevents a definitive attribution of the phishing payload or targeted brand. Defenders should therefore treat the domain as high‑risk: add the IP address 107.172.61.186 and the domain name to block lists, monitor DNS queries for the associated nameservers, and continue to watch for re‑activation. Correlation with other indicators of compromise, such as email samples or URL patterns, may reveal additional campaign details.