# spaceexpresswaybill.com — SUSPICIOUS

> spaceexpresswaybill.com posed as a global shipping service to phish users. Avoid interacting with this offline domain to protect your data.

## Summary
PhishDestroy identifies spaceexpresswaybill.com as a low-risk generic phishing domain targeting users with a fake global shipping service theme. The domain impersonates logistics or shipping companies by using the page title "Welcome to Space Express Waybill - Premium Global Shipping Solutions" to lure victims into disclosing sensitive information.

Technically, spaceexpresswaybill.com was registered through NameSilo, LLC and resolved to the IP address 148.72.153.160. It was flagged by 2 out of 95 security vendors on VirusTotal and appeared on one security blocklist, indicating limited but notable recognition of its phishing intent. The domain creation date is March 04, 2026, suggesting recent malicious activity. The infrastructure and indicators align with typical phishing setups, yet the overall threat level remains low.

Currently, spaceexpresswaybill.com is offline, mitigating immediate risk to users. PhishDestroy recommends users avoid revisiting this domain or providing any personal information if encountered previously. Continuous monitoring and blocking measures from security vendors help prevent potential phishing attacks stemming from this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Welcome to Space Express Waybill - Premium Global Shipping Solutions

## Domain Intelligence
- Registered: 2026-03-04 23:07:01
- Registrar: NameSilo, LLC
- Country: US
- IP: 148.72.153.160
- IP Country: US
- IP City: St. Louis
- IP Org: AS30083 velia.net
- Nameservers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/Q3StXQLL/8d0ef6a4c62a.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/spaceexpresswaybill.com
- PhishDestroy: https://phishdestroy.io/domain/spaceexpresswaybill.com/
- LLM endpoint: https://phishdestroy.io/domain/spaceexpresswaybill.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/spaceexpresswaybill.com/
Last updated: 2026-03-19