lodocushgor[.]com

PhishDestroy has identified lodocushgor.com as an active credential theft phishing domain, currently flagged by 16 of 95 VirusTotal vendors and listed on Google Safe Browsing for phishing. The domain was created on March 19, 2026, and is registered through Global Domain Group LLC, resolving to IP address 103.101.85.61. It appears on 1 security blocklist and has been noted in 1 AlienVault OTX threat intelligence pulse. The SSL certificate, issued by Let's Encrypt with identifier YR1, is still valid, and the page title simply repeats the domain name, a common tactic among phishing sites.

This domain poses a high risk of credential theft, as it is designed to trick users into entering sensitive information. The low blocklist count (1) and recent creation date suggest it may be early in its lifecycle, but the high VirusTotal detection rate indicates widespread recognition among security vendors. The hosting IP, 103.101.85.61, is likely shared with other malicious domains, and the registrar, Global Domain Group LLC, has been associated with questionable registrations in the past.

Given the active status and confirmed phishing indicators, users should avoid any interaction with lodocushgor.com. PhishDestroy recommends blocking the domain at the network or email gateway level, and if any credentials were entered, they should be changed immediately. Organizations should also monitor for related domains using similar patterns and educate users about the risks of credential theft phishing.