courierstrustdelivery[.]com

This domain, courierstrustdelivery.com, is currently active and exhibits characteristics of a brand‑impersonation campaign targeting Google. The domain was registered on 21 July 2025 through Dynadot LLC and resolves to the IPv4 address 198.12.80.250, which belongs to AS36352 (HostPapa) in the United States. HTTP requests return a 302 redirect and the site presents a TLS certificate issued by Let’s Encrypt (R10). Reputation services flag the domain as malicious: it appears on one security blocklist, Scamadviser assigns a trust score of 1 / 100, Gridinsoft reports a score of 0 / 100, and VirusTotal records 11 detections out of 95 scanned vendors. PhishDestroy has also blocked the domain. The page title returned by the server is “Courier Trust Delivery – Courier Trust Delivery”, but no further content analysis is available. The observed infrastructure suggests a low‑cost hosting setup rather than a sophisticated operation, yet the detection rate and blocklist presence indicate active abuse. Defenders should treat any traffic to this domain as hostile, block the IP address 198.12.80.250 and the domain name at perimeter defenses, and monitor for related indicators such as the Let’s Encrypt certificate fingerprint and the AS36352 network. Additional investigation is required to confirm the exact phishing vector and to assess whether the domain is being used in conjunction with other malicious sites.