logfiles[.]help

PhishDestroy has confirmed that the domain logfiles.help is actively engaged in steal-themed phishing operations, presenting an elevated risk to unwary users. The site masquerades as a legitimate log-file service in order to harvest credentials and sensitive session tokens, tricking visitors into surrendering access to their accounts.

This domain was flagged by PhishDestroy after resolving to IP 89.163.155.33, registering with NameSilo, LLC on March 17, 2026, and obtaining a Let’s Encrypt SSL certificate. VirusTotal analysis shows only 2 out of 95 security vendors currently detect the threat, underscoring its stealth profile. In addition, logfiles.help already appears on two prominent blocklists and is actively blocked by MetaMask and SEAL, demonstrating widespread consensus on its malicious nature.

To mitigate risk, users should avoid interacting with logfiles.help or any subdomains and immediately revoke any credentials entered on the site. Domain and DNS administrators should update blocklists and firewall rules to reject traffic to 89.163.155.33 and the domain itself. Security teams are advised to hunt for related infrastructure by pivoting on the NameSilo registration details and the Let’s Encrypt certificate serial, which may reveal additional malicious hosts leveraging the same infrastructure.