elinkcouriers[.]com[.]ascontrades[.]com

The domain www.elinkcouriers.com.ascontrades.com, recently flagged by one out of 91 vendors on VirusTotal, is part of a phishing operation targeting users with a fake courier service front. Despite being offline now, it was initially detected by PhishDestroy on June 19, 2026, shortly after its creation on June 25, 2025. The domain was registered through HOSTINGER operations, UAB, and hosted on an IP in the Netherlands under Host Sailor Ltd.

The site, which presented a "Choose Language" page, likely aimed to deceive users into providing sensitive information under the guise of a legitimate courier service. The use of Let's Encrypt for SSL certification adds a layer of perceived legitimacy, which is a common tactic in phishing schemes. The domain's platform risk score is 56 out of 100, indicating a moderate level of threat, while the abuse score remains relatively low at 19 out of 100.

PhishDestroy's early detection highlights the importance of identifying threats during the critical window before they are widely recognized by antivirus databases. The domain's presence on one public blocklist underscores its malicious intent, despite the low detection rate on VirusTotal. The swift takedown of the site mitigates immediate risks, but the incident serves as a reminder of the evolving tactics employed by cybercriminals to exploit unsuspecting users.