loomisinternationalservice[.]com

The domain www.loomisinternationalservice.com is currently active and hosts a page titled “Loomis International Courier Service”. It presents a valid TLS certificate issued by Let’s Encrypt (YR2) and resolves to the IPv4 address 163.61.188.7, which is geolocated to the United States and associated with the MIT network. Registration records show the domain was purchased through NameCheap, Inc., and the authoritative name servers are dns1.lytehosting.com and dns2.lytehosting.com. HTTP requests return status code 200, confirming the web server is reachable. Reputation data indicate that four of ninety‑one VirusTotal scanners have flagged the domain, and it appears on one external blocklist. The domain is also listed by the PhishDestroy blocklist as malicious. No additional malware or payload analysis has been published, and the page content beyond the title has not been examined. Given the combination of a phishing‑type page title, active TLS certificate, and multiple detections, the domain should be treated as high‑risk. Defensive actions include adding the IP address 163.61.188.7 and the domain to network deny lists, monitoring DNS queries for the two lytehosting name servers, and ensuring that email filters block any communications that reference Loomis International Courier Service. Continuous re‑assessment is advised as further threat intelligence becomes available.