donnylogistics[.]com

This domain, donnylogistics.com, is actively engaged in a phishing campaign designed to impersonate a legitimate logistics company, Donny Logistics Company, to harvest user credentials. Analysis of the page structure and metadata reveals a generic phishing framework targeting individuals in supply chain, shipping, or corporate procurement roles. The site mimics professional logistics portals, presenting fake tracking systems, invoice forms, or account login interfaces to trick victims into entering sensitive credentials, which are then exfiltrated to attacker-controlled infrastructure. The absence of an SSL certificate further increases the risk of data interception during transmission, particularly in unsecured or public networks. Infrastructure analysis provides concrete indicators of malicious intent. The domain was registered on July 26, 2025, through OwnRegistrar, Inc., a registrar frequently associated with newly created phishing domains due to its permissive registration policies. It resolves to the IP address 163.61.188.5, hosted on AS153568 (NEW DHAKA HARDWARE), an autonomous system with a history of hosting phishing and fraudulent sites. As of the latest scan, only 1 out of 95 security vendors on VirusTotal flagged the domain, indicating low detection coverage and suggesting the campaign may still be in an early or evasive phase. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, confirming its classification as a phishing threat. Users who have visited donnylogistics.com or entered credentials on the site should take immediate remedial action. All passwords or sensitive information submitted should be considered compromised and changed across all platforms where identical or similar credentials were used. System scans using updated endpoint protection tools are recommended to detect potential malware or backdoors installed via secondary payloads. Network administrators should block the domain (donnylogistics.com) and its resolving IP (163.61.188.5) at the perimeter to prevent further access. Monitoring for unauthorized access or unusual account activity is critical, particularly for corporate or financial systems. Given the domain’s recent registration and low detection rate, heightened vigilance is advised for related phishing attempts using similar naming conventions or logistics-themed lures.