qorvexa-freight-logistics[.]com

This domain, qorvexa-freight-logistics.com, was registered on March 19 2026 through NameSilo, LLC and began resolving to the public IPv4 address 50.6.200.60 shortly thereafter. The authoritative name servers ns1.qorvexa-freight-logistics.com, ns2.qorvexa-freight-logistics.com and ns5.netlight are currently listed, indicating that the operator controls its own DNS zone. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that it is being used in a live malicious campaign. VirusTotal analysis shows that three of ninety‑one scanning engines have flagged the site, providing independent confirmation of its malicious nature.

No additional telemetry such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts has been published, leaving the exact content of the hosted page unverified. The limited visibility suggests a focus on low‑profile hosting to avoid rapid takedown, while still attracting victims through credential‑harvesting techniques typical of generic phishing operations. Defenders should immediately add qorvexa-freight-logistics.com to DNS and URL filtering policies, block outbound connections to 50.6.200.60 at the network perimeter, and monitor for any email messages that reference the freight‑logistics theme.

Continuous re‑scanning of the domain with multi‑engine services is advised, as additional detections may emerge. Organizations that process logistics‑related communications should educate users about unsolicited login requests and enforce multi‑factor authentication to mitigate potential credential compromise. Incident response teams should treat any authentication attempts to the domain as compromised and isolate affected accounts pending investigation.