ltcmai[.]com

The domain ltcmai.com was registered through Dynadot LLC on 21 February 2026 and is hosted behind Cloudflare’s network (AS13335). DNS resolves to 172.67.183.230 and the authoritative name servers are bristol.ns.cloudflare.com and hans.ns.cloudflare.com. The site presented a page titled “QUANT AI” and employed front‑end technologies including Vue.js, as well as advertising and tracking scripts such as Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights; traffic was served over HTTP/3. An SSL certificate issued by Let’s Encrypt (R12) was observed, indicating standard HTTPS encryption.

The domain has been flagged by the PhishDestroy blocklist and appears on a single external blocklist; a single security vendor out of 93 on VirusTotal raised a detection, while the remaining scanners returned clean results. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high likelihood of malicious use. As of the reporting date (24 July 2026) the site is offline, and no further content is reachable.

Current evidence confirms the infrastructure is typical of generic phishing campaigns that leverage compromised or rented hosting and third‑party analytics to obscure attribution. Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the IP address or associated Cloudflare name servers, and consider adding the domain to internal blocklists. Ongoing verification of the single vendor detection on VirusTotal is recommended to assess whether additional payloads or credential‑harvesting pages were ever hosted before takedown.