national-lottery[.]shop

Analysis indicates that the domain national-lottery.shop was registered through Namecheap, Inc. on 12 June 2026. Within weeks of registration it was observed by multiple security services. The domain is currently listed on the PhishDestroy blocklist and is also present on one additional security blocklist, confirming its active use in malicious campaigns. VirusTotal scans show that six of the ninety‑one participating scanners have flagged the domain as malicious, providing independent corroboration of its phishing nature.

No public information is available regarding the hosting provider, IP address, autonomous system number, or geographic location of the server, and SSL certificate details have not been disclosed. Likewise, HTTP response codes, Safe Browsing verdicts, and page‑title metadata have not been published in the available intelligence, leaving those vectors unverified at this time. The evidence base is limited to registration data, blocklist entries, and the VirusTotal detection count, which collectively justify an elevated risk rating.

Defenders should immediately add national-lottery.shop to outbound filtering rules, ensure that internal DNS resolvers block resolution, and propagate the indicator to intrusion‑detection and web‑gateway products. Continuous monitoring of threat‑intel feeds for any newly disclosed hosting attributes or payload samples is recommended, as further technical details may emerge that could refine detection signatures. Organizations that receive unexpected communications referencing national‑lottery.shop should treat them as fraudulent and advise users to avoid clicking any links or providing credentials.