logistics[.]demotunde[.]com

Analysis as of July 27 2026 flags www.logistics.demotunde.com as an active high‑risk generic phishing infrastructure. The domain was registered on March 05 2026 through Spaceship, Inc. and is currently hosted on the IP address 5.182.208.207, which is served by the authoritative name servers ns5.maskhosting.com and ns6.maskhosting.com. The domain appears on one public security blocklist and has been added to the PhishDestroy blocklist, indicating that at least one industry‑run sinkhole has already identified it as malicious.

VirusTotal reports that 2 of 91 scanned security vendors have flagged the domain, providing limited but corroborating detection evidence. No additional public intelligence such as Google Safe Browsing, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or trust‑score metrics are presently available for this host. Consequently, the full scope of the phishing campaign—such as the targeted brand, credential‑capture pages, or associated payloads—remains unknown.

Defenders should block the domain at network perimeter devices, update URL filtering lists with the observed IP and name‑server pairs, and monitor for any new detections from additional sandbox or AV vendors. Continuous re‑query of VirusTotal and other threat‑intel platforms is recommended to capture emerging indicators. Organizations that handle logistics or supply‑chain communications should be particularly vigilant, as the domain name suggests an attempt to lure victims with logistics‑related terminology.