dalilee[.]quick-scan[.]icu

This domain, dalilee.quick-scan.icu, is identified as a credential-harvesting phishing site targeting users through fraudulent delivery and fulfillment service impersonation. The page title, 'Door to Door Delivery and Fulfillment Services | Dalilee,' mimics legitimate logistics providers to deceive victims into submitting sensitive information. Currently, the domain is offline, though prior activity suggests it was actively used for phishing operations. Analysis of the domain's infrastructure reveals multiple high-risk indicators. The domain was flagged by 11 of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. It was registered through Web Commerce Communications Limited on November 17, 2025, and resolves to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). The domain appears on one security blocklist, lacks an SSL certificate, and was explicitly flagged by Google Safe Browsing as a phishing threat. The creation date, combined with the absence of legitimate security measures, further supports its classification as a high-risk phishing domain. At present, dalilee.quick-scan.icu is offline, though its infrastructure remains a potential threat vector. Organizations and individuals are advised to block the domain and its associated IP address (188.114.97.3) at the network level. Users who may have interacted with the site should reset credentials for any accounts accessed during the exposure window and monitor for unauthorized activity. Security teams should treat this domain as a confirmed phishing threat and include it in threat intelligence feeds for proactive defense measures.