# cheetahexpress.online — SUSPICIOUS > Cheetahexpress.online is under investigation for phishing risks. Avoid sharing personal info and verify website legitimacy before interacting. ## Summary PhishDestroy identifies cheetahexpress.online as a generic phishing domain registered recently on February 3, 2026, through Global Domain Group LLC. Its risk level remains under investigation due to suspicious context. The domain resolves to IP 148.72.153.160 and currently shows no detections on VirusTotal, indicating it has yet to be flagged by security vendors. Despite clean scan results, its recent creation and registrar profile raise concerns. This domain remains active and is being monitored closely by PhishDestroy. Users are advised to exercise caution and avoid engaging with the site until further analysis clarifies its threat status. ## Threat Details - Verdict: SUSPICIOUS - Site status: alive (HTTP 200) - Page title: CHEETAH EXPRESS DELIVERY ## Domain Intelligence - Registered: 2026-02-03 00:00:00 - Registrar: Global Domain Group LLC - IP: 148.72.153.160 - Nameservers: dns1.afeeshost.ltd,dns2.afeeshost.ltd,dns3.afeeshost.com ## Detection Status - VirusTotal: 2 vendors flagged Vendors: ["Gridinsoft", "SOCRadar"] - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["PhishDestroy"] ## Evidence - Screenshot: https://i.ibb.co/tPzy9xRf/d40702e981ec.png - Cloudflare Radar: https://radar.cloudflare.com/scan/33761c06-0801-4d7b-840b-4f7cbc76443d - PhishDestroy: https://phishdestroy.io/domain/cheetahexpress.online/ ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/cheetahexpress.online/ Last updated: 2026-03-14