gotruckdelivery[.]com

The domain gotruckdelivery.com was registered on March 11, 2026 and is currently active. DNS analysis shows MX records pointing to the domain itself with priority 0 and authoritative name servers ns1.hostcreed.com and ns2.hostcreed.com. The domain resolves to IP 192.142.54.88, which belongs to AS214036 Ultahost, Inc. in the Netherlands. An SSL certificate issued by Let’s Encrypt (R13) is present, and the web server responds with HTTP 200, delivering content built with PHP, Tailwind CSS, LiteSpeed, Alpine.js, and external libraries from Unpkg and jsDelivr over HTTP/3. The page title "Welcome to GoTruck Delivery Company - Premium Global Shipping Solutions" suggests a logistics theme, while the intelligence tags identify the site as a brand-impersonation campaign targeting the "across" brand and operating as a crypto scam. VirusTotal scans show 14 of 95 security vendors flagging the domain, and the site appears on a single security blocklist. PhishDestroy has already blocked the domain, and Gridinsoft assigns a trust score of 0/100, indicating high risk. Registration details list TuringSign Inc. d/b/a Cosmotown as the registrar. While the exact malicious payload and victim interaction flow remain unknown, the combination of recent registration, low trust score, vendor detections, and confirmed blocklist placement signals a high‑confidence threat. Defenders should add the domain to outbound and inbound filtering rules, monitor DNS queries for the associated IP and name servers, and consider broader threat‑intel sharing to prevent credential or crypto‑asset theft attempts linked to this impersonation campaign.