This domain has been resurrected — active threat again
Detected by 2 of 95 security vendors and listed in 1 public blocklists. Do not connect a wallet; do not paste a seed phrase.

eaglelightexpress[.]com

Domain Security & Threat Intelligence Report
“Eagle Light Express | Reliable Global Logistics, Freight, and Warehousing Solutions”
2/95 VT Resurrected May 17, 2026 1 Blocklist 1 Report Sent
Case PD-20260516-AF263A Appeal listing
0 Risk Score
Data coverage VirusTotal 2 / 95 URLQuery no det. OTX no pulses CF Radar clean URLScan report ready DNS blocks none SSL valid, 89d WHOIS Screenshot captured Redirect chain not probed CDN bypass n/a
VirusTotal
2 det.
URLQuery
no det.
URLScan
Report ↗
SSL
Let's Encrypt
Age
Status
Live
DestroyList
Listed
Reports Sent
1
02

Forensic brief

auto-generated · PhishDestroy AI
PhishDestroy AI
probe: May 17, 2026
score: 48/100
case: PD-20260516-AF263A
vendors2/95
blocklists1
Analyst brief · auto-generated

PhishDestroy has confirmed that eaglelightexpress.com is an active phishing site masquerading as a legitimate global logistics provider. The domain presents itself as Eagle Light Express, a company offering freight, warehousing, and logistics solutions, but its sole purpose is to trick visitors into entering sensitive information such as login credentials or payment details under false pretenses. The page title and website content are designed to appear professional and trustworthy, leveraging industry terminology to lower user suspicion and increase the likelihood of successful deception. This domain was flagged by PhishDestroy after thorough analysis revealed several red flags. VirusTotal’s detection engine shows that only 1 out of 95 participating security vendors identified the domain as malicious, highlighting how easily such threats can evade automated detection. The domain was registered on May 18, 2025, through COSMOTOWN, INC., a registrar known for hosting numerous low-reputation domains. The site resolves to IP address 37.49.229.75 and utilizes a valid SSL certificate issued by Let’s Encrypt, which further enhances its credibility and may lull visitors into a false sense of security. If you have visited eaglelightexpress.com, immediately cease any interaction with the site and avoid entering any personal or financial information. Check your accounts for suspicious activity, especially those related to shipping, logistics, or payment services. Use a reputable password manager to change any reused or exposed credentials and consider enabling multi-factor authentication where available. Report the domain to your security team or through PhishDestroy’s submission portal, and run a full antivirus scan on your device to ensure no malware was downloaded inadvertently. Stay vigilant: always verify unexpected shipping notifications or unsolicited login prompts by contacting the purported company through official, verified channels rather than links provided in emails or websites.

Suspicious clean drainer
03

Threat response pipeline

May 17, 2026 · 1 report submitted
Discovery
Submission
Legal
Takedown
11/19
30+ Proprietary Parsers
Distributed scanning of Google Ads, SEO-manipulated results, Twitter/X, YouTube & Telegram campaigns.
Infrastructure Analysis
dnstwist & typosquatting detection.
Community Intelligence
Real-time ingestion via Telegram Bot & partner intelligence feeds.
Threat Ingested
eaglelightexpress.com detected and queued for full analysis.
May 17, 2026
49+ Vendor Submissions
Threat data submitted to 49+ security vendors & threat-intel platforms. 2 flagged this domain.
Cloudflare Radar
View scan — verdict: clean
VirusTotal
2 / 95 vendors flagged on VirusTotal.
Blocklist Detection
Found in 1 blocklists: PhishDestroy.
Forensic Evidence Collection
URLScan.io, URLQuery & Cloudflare Radar — DOM snapshots, HTTP transactions, DNS & certificate data.
Registrar & Hosting Notification
Abuse report sent to TuringSign Inc. d/b/a Cosmotown at abuse@estoxy.com with forensic evidence (metadata, screenshots, PDF).
1778936618
DestroyList Published
Added to PhishDestroy/DestroyList — open-source blocklist for wallets & extensions.
Abuse Reports Sent (1)
1 abuse reports filed; 15h elapsed since first report.
Open Threat Database
Real-time commits to GitHub repository & live monitoring at phishdestroy.io/live.
Social Broadcasting
Automated alerts on X, Telegram & Mastodon.
Awaiting Takedown
Domain still active — monitoring & re-reporting continues. 15h since first report.
04

Evidence capture

urlscan snapshot · domain intelligence
Live Snapshot
2026-05-17 04:57 UTC
Malicious · 2/95 engines
Forensic screenshot of eaglelightexpress.com
IP: 37.49.229.75
TuringSign Inc. d/b/a Cosmotown
Let's Encrypt
Page Title
Eagle Light Express | Reliable Global Logistics, Freight, and Warehousing Solutions
Favicon Hash
3c2b5b4087d4655df57c9b38981911f3

Domain Intelligence

Domaineaglelightexpress.com
Registrar TuringSign Inc. d/b/a Cosmotown
Abuse contact abuse@estoxy.com
IP Address 37.49.229.75
ASN 3920 · PUSHPKT OU
Registration Created 2026-05-16 14:07:01
SSL Let's Encrypt · valid 89d · expires 2026-08-14
Hosting NL Amsterdam , NL · ESTOXY OU
Nameservers "ns2.globaldnsnetwork.com"]
Page title “Eagle Light Express | Reliable Global Logistics, Freight, and Warehousing Soluti…”
HTTP status 200
Technical details DNS, hashes, case ID
Favicon hash3c2b5b4087d4655df57c9b38981911f3
SSL fingerprintc3bc20c3a4ea6d4f6e1ae14cb94cbf0896e7acc053cab28587e3e8104c6c1448
Case IDPD-20260516-AF263A
08

Public blocklist status

cross-vendor confirmation
1
Listed in 1 public blocklist — confirmed by independent sources
Sources with no listing are omitted.
09

Technologies

Wappalyzer · Cloudflare Radar
Technologies · 9 identified
Bootstrap
LiteSpeed
Swiper
Smartsupp
Select2
jQuery
FancyBox
Popper
HTTP/3
Detected via Cloudflare Radar · Wappalyzer engine
10

VirusTotal consensus

95 vendors · 3-col matrix
2/95
vendors flagging
Partial detection

Aggregated detection across 95 security vendors.

Per-vendor breakdown not available — view raw report on VirusTotal ↗
11

Site performance

PageSpeed Insights · mobile
Site performance analysis

Google PageSpeed Insights — mobile audit of eaglelightexpress.com

45
Poor
Performance
FCP
5.21
First Contentful Paint
LCP
17.45
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
481
Total Blocking Time
SI
9
Speed Index
12

Evidence & external reports

cross-reference this domain
14

Were you affected by this site?

immediate response · authorities

Were You Affected?

You are not alone and there is nothing to be ashamed of. Reporting is the most powerful weapon against fraud — your report can prevent others from becoming victims.
Beware of recovery scammers! No legitimate service will ask for upfront payment to recover stolen crypto. Learn more about recovery fraud →
15

Report to your local authorities

geo-aware · authorities · AI complaint
Your country (auto-detected)
Netherlands

  Email template — registrar abuse

To: abuse@estoxy.com, abuse@cosmotown.com, privacy@cosmotown.com Registrar: TuringSign Inc. d/b/a Cosmotown Case: PD-PD-20260516-AF263A
Open in mail client Appeal (if false-positive)
16

Embed this report

iframe · sizer · CC-BY

Embed this report

Drop a live, self-updating risk widget anywhere — blog, DAO forum, Discord webhook, X post. Free, no API key, CC-BY.

eaglelightexpress[.]com 48/100 RESURRECTED · 2/95 VT · 15h View full report ↗
Live preview at 100% width
Canonical: https://phishdestroy.io/domain/eaglelightexpress.com/ JSON API llm.txt
17

About this report

methodology · appeals · API

About this report: eaglelightexpress.com

This domain security report is maintained by PhishDestroy's automated threat-intelligence pipeline. Our system continuously monitors this domain across 95 security vendors on VirusTotal and 1 public blocklists.

The site displays a page titled “Eagle Light Express | Reliable Global Logistics, Freight, and Warehousing Solutions”.

eaglelightexpress.com has been flagged by 2 security vendors as of May 17, 2026.

If you believe this listing is inaccurate, you can submit an appeal. For more information about our methodology, visit our FAQ page.