rastreoglobal[.]click

The domain rastreoglobal.click is currently flagged as an active credential theft operation targeting users in the logistics and shipment tracking sector. Analysis indicates the site impersonates legitimate parcel tracking platforms to deceive victims into entering sensitive login credentials, which are then harvested for unauthorized access to accounts or further malicious activities. No specific brand name has been confirmed in this impersonation, but the domain structure and content align with common tactics used in logistics-themed phishing campaigns. Infrastructure analysis reveals the domain was registered on June 23, 2026, through NameSilo, LLC, a registrar frequently observed in phishing operations. It resolves to the IP address 162.144.180.56, which has been associated with other low-reputation domains in recent months. As of the latest assessment, rastreoglobal.click is detected by 4 of 95 security vendors on VirusTotal, with no additional blocklist entries or trust scores reported from major threat intelligence platforms. The domain employs a Let's Encrypt SSL certificate, a common tactic to lend superficial legitimacy to malicious sites. The campaign remains active, and users are advised to exercise extreme caution when encountering this domain or any unsolicited communications referencing it. Organizations should implement real-time URL filtering to block access to rastreoglobal.click and monitor for indicators of compromise, including unexpected login attempts or unauthorized access to logistics-related accounts. End users should verify the authenticity of any tracking links by cross-referencing with official carrier websites and avoid entering credentials on unfamiliar platforms, even if they appear visually similar to legitimate services.