logistrackdelvs[.]icu

Analysis indicates that the domain logistrackdelvs.icu was registered on March 28, 2026 through Global Domain Group LLC. The domain is protected by a Let’s Encrypt certificate (R13) and currently resolves to the IPv4 address 163.61.188.2, which geolocates to the United States and is associated with a MIT‑linked network. HTTP requests receive a 302 redirect, and the sole MX record points back to logistrackdelvs.icu, a pattern commonly observed in credential‑harvesting infrastructure.

The site’s reputation metrics are extremely low; Gridinsoft assigns a trust score of 1 out of 100. VirusTotal scans have flagged the domain by 4 of 95 security vendors, and the domain appears on a single external blocklist that has already been incorporated into the PhishDestroy feed. The HTTP status code 302 combined with a generic "Home | Page" title suggests the site may be using a redirection chain to deliver a phishing landing page.

These observable attributes align with the generic_phishing classification. The presence of a self‑referencing MX record, low trust score, and multiple vendor detections indicate active malicious use, likely to capture login credentials or personal data. However, the limited public content and the fact that only one blocklist currently lists the domain leave some uncertainty regarding the scale of the campaign and the specific brands targeted.

Defenders should treat logistrackdelvs.icu as high‑risk. Immediate actions include adding the domain and its resolving IP 163.61.188.2 to deny lists, configuring email gateways to reject or quarantine messages that reference this MX, and monitoring network traffic for outbound connections to the IP address. Continuous re‑evaluation is advised, as further analysis may reveal additional payloads or infrastructure ties.