jtexpress-sr[.]top

This domain, jtexpress-sr.top, was registered on July 30, 2026, and is currently under investigation for phishing activity targeting delivery or logistics services. Google Safe Browsing has flagged the domain for social engineering, indicating it likely attempts to deceive users into divulging credentials or personal information. The domain appears on one security blocklist, specifically PhishDestroy, which has blocked access to it. VirusTotal reports that 91 vendors have scanned the domain, with no detections at the time of analysis; however, the absence of detections does not confirm the domain is safe and should not be interpreted as such. Infrastructure analysis reveals the domain is hosted on IP 103.149.247.148, associated with ASN 139070 (HostRoyale Technologies Pvt Ltd), and is registered through Alibaba Cloud Computing Ltd. (dns10.hichina.com).

The SSL certificate, issued by Let's Encrypt, is valid and does not raise immediate red flags. The domain resolves to a live HTTP server, though the exact content of the page remains unconfirmed. No brand target or phishing kit has been explicitly identified in the available data, and the page title is not yet analyzed. Defenders should treat this domain as high-risk for social engineering and phishing.

Block access at the network level, particularly for users in logistics, e-commerce, or delivery sectors. Monitor for connections to 103.149.247.148 and the domain itself in proxy, DNS, and endpoint logs. If internal users report interaction with this domain, initiate credential resets and review accounts for unauthorized access. Given the domain's recent registration and active blocklisting, assume it is part of an ongoing campaign and prioritize containment.