Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 3. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

correioslogistica[.]online

“Encomenda Retida - Correios”

Threat verdict Critical 81/100 evidence score
Availability Content unavailable Content was unavailable in the latest observation
VirusTotal detections: 3/91 Spamhaus DBL: DBL_PHISH Young domain: 12 days old
Aug 2, 2026 1 Report Sent
Evidence Summary
CRITICAL
Ref
CB641CFA
Score
81/100

The domain correioslogistica.online is currently classified as a generic phishing site. According to the latest intelligence, the domain was added to the PhishDestroy blocklist, indicating that the service has identified malicious activity associated with it. A VirusTotal scan was performed on 2026-08-02, involving 91 antivirus and URL-reputation engines; none of the engines returned a positive detection at the time of scanning. The same scan does not constitute evidence of safety, as the absence of detections may result from evasion techniques or limited coverage of the particular payload. The domain also appears on a single external security blocklist, reinforcing the notion that at least one independent threat-intelligence source considers it malicious.

No additional technical details such as registrar information, hosting IP, ASN, geographic location, SSL certificate status, HTTP response codes, or page title have been released in the current feed. Consequently, the infrastructure behind correioslogistica.online remains opaque, and further probing is required to establish the full attack surface. Analysts should treat the lack of visible attributes as a data gap rather than an indication of benign behavior. Given the confirmed blocklist entries and the phishing classification, defensive teams are advised to add correioslogistica.online to URL filtering rules, DNS sinkhole lists, and endpoint web-proxy block policies.

Continuous monitoring of DNS queries for this FQDN is recommended to detect any resurgence or related sub-domains. If possible, network traffic should be captured for deeper inspection to reveal potential command-and-control channels or credential harvesting attempts. Organizations should also educate end users about unsolicited communications that reference logistics or parcel delivery services, as the domain name suggests a possible lure targeting such contexts.

VirusTotal
VirusTotal
3 det.
URLScan
URLScan
ScamAdviser
Scamadviser
80/100
TLS Certificate
Let's Encrypt
Age
12d Very New!
Observed status
Content unavailable
PhishDestroy
DestroyList
Listed
Reports Sent
1
Data coverage VirusTotal 3 / 91 URLQuery checked — no detections recorded PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks not checked TLS valid certificate, 89d WHOIS 12d old Screenshot 5 captures · 4 sources Redirect chain not probed Scamadviser 80/100

Threat Response Pipeline

Discovery
Checks
Reports
Availability
14/14
Sent Report Recorded
Stored sent-report record for registrar HOSTINGER operations, UAB, hosting provider, 1 abuse contact
abuse@hostinger.com
Aug 2, 2026

Public Blocklist Status

Stored Capture

Page Title
Encomenda Retida - Correios
TLS Certificate
Valid transport encryption · Issued by Let's Encrypt · valid for 89 days

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN LiteSpeed · AS47583 AS-HOSTINGER Hostinger International Limited, CY
IP Reputation abuse score 0/100 0 reports checked Aug 2, 2026
Registrar Hostinger LT(LT)
IP Address 147.93.38.26 BR
GeoBR São Paulo, BR
NetworkAS47583 · Hostinger International Limited
RegistrationCreated Aug 1, 2026 (12d · Very New!) Expires Aug 1, 2027
Time to First Unavailability 3 days
What we count Elapsed time from the first stored abuse report to the first observation that the content was unavailable. This does not establish the cause.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedAug 2, 2026
DOM Analysisanalyzed Aug 2, 2026score 81/100
IoC Extractionscanned Aug 3, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://correioslogistica.online/
Nameserversaurora.dns-parking.comnebula.dns-parking.com
TLS Observationscanned Aug 6, 2026
Case ID
ICANN OVERSIGHT

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Nothing is sent automatically.
Threat Intel Cross-Reference · source references
ScamAdviser Public lookup
A public ScamAdviser lookup is available. Review its current score and warnings at the source; the existence of a lookup page is not itself a malicious verdict.
View on ScamAdviser
Live-fetched via CF worker proxy pool · cached 24h
Technologies · 7 identified
PHP
Programming languages

PHP is a general-purpose scripting language used for web development.

php.net 100% confidence
Tailwind CSS
UI frameworks

Tailwind is a utility-first CSS framework.

tailwindcss.com 100% confidence
LiteSpeed
Web servers

LiteSpeed is a high-scalability web server.

litespeedtech.com 100% confidence
SweetAlert2
JavaScript libraries

SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.

sweetalert2.github.io 100% confidence
jsDelivr
CDN

JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.

www.jsdelivr.com 100% confidence
Hostinger
Hosting

Hostinger is an employee-owned Web hosting provider and internet domain registrar.

www.hostinger.com 100% confidence
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

3 / 91 security vendors flagged this domain
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
Fortinet
SOCRadar

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of correioslogistica.online · checked Aug 2, 2026

90
Good
Performance
FCP
2.73s
First Contentful Paint
LCP
2.89s
Largest Contentful Paint
CLS
0.058
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
2.73s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Evidence & External Reports

Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260802-3A618E Recipient: abuse@hostinger.com
URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 288.8 KB

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/correioslogistica.online"
  title="PhishDestroy threat report for correioslogistica.online"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.