# expeditedrouteshippingagency.com — SUSPICIOUS

> Beware of expeditedrouteshippingagency.com—a crypto drainer impersonating a shipping agency. VirusTotal shows 0/95 detections.

## Summary
PhishDestroy identifies expeditedrouteshippingagency.com as an active crypto drainer scam site masquerading as a legitimate shipping agency. This domain, registered on July 19, 2025 through Global Domain Group LLC, resolves to IP 198.251.84.200 and currently evades detection with 0 out of 95 VirusTotal engines flagging it. Its Let’s Encrypt SSL certificate adds a false veneer of trustworthiness, luring victims into entering sensitive information or cryptocurrency wallet details under the guise of expedited shipping services.  The domain’s recent creation date and near-zero detection rate suggest it’s part of a rapidly deployed campaign targeting users expecting package deliveries. Threat actors frequently exploit urgent shipping themes to lower user suspicion, especially when combined with professional-looking interfaces and urgent call-to-action prompts. Given the absence of security vendor coverage, this site poses an elevated risk to unsuspecting visitors who may unknowingly expose personal data or digital assets.  If you’ve visited expeditedrouteshippingagency.com, disconnect from the internet, scan your device for malware, and avoid entering any credentials or cryptocurrency wallet information. Report the domain to PhishDestroy using the unique seed identifier 5e5d9b for further analysis. Never trust unsolicited shipping notifications unless verified through official carrier channels. Consider revoking any session tokens or API keys exposed during the visit and monitor your accounts for unusual activity.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-19 18:50:48
- Registrar: Global Domain Group LLC
- IP: 198.251.84.200

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b65cb574-51c2-425c-93e9-0f3d33ae8288
- PhishDestroy: https://phishdestroy.io/domain/expeditedrouteshippingagency.com/
- LLM endpoint: https://phishdestroy.io/domain/expeditedrouteshippingagency.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/expeditedrouteshippingagency.com/
Last updated: 2026-03-23