Domain security and threat intelligence

vasklogistics.online

Name: vasklogistics.online — PhishDestroy evidence record
Published: 2026-03-05
License: https://creativecommons.org/licenses/by/4.0/

In short

The captured page for vasklogistics.online presents transport and shipping services, displaying VASK Logistics branding, navigation links for tracking and quotes, and service overviews such as international document and freight delivery. It provides interactive buttons for tracking and obtaining quotes alongside imagery related to freight operations.

“VASK LOGISTICS EXPRESS – Vask Logistics”

Review the evidence

Registrar: Global Domain Group
Resolved IP: 148.72.153.160velia.net
Registered: Nov 18, 2025
First observed: Mar 5, 2026

PhishDestroy assessment Critical

81/100

Evidence score

Availability Last known active Latest stored reachability observation Observed Nov 2, 2026 · 23:22 UTCHTTP probe

Risk signals

VirusTotal detections: 4/91 Spamhaus DBL: spam domain URLQuery threat systems: 1 alert

VirusTotal

4 / 91

engine detections

URLQuery

threat alerts

OTX

community references

URLScan

Malicious

engine verdict · score 88

Page captures

open gallery

Domain age

349 days

registered 2025-11-18 according to RDAP

Reports sent

view timeline

ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-03-04 21:59:37 UTC. The recorded recipient is abuse@velia.net. The latest stored availability evidence still shows the domain reachable; 8 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

8 months

Reports sent

Latest case ID

PD-20260304-CF7739

Current status

HTTP 301 at latest stored check

Analysis

Domain summary

PhishDestroy first recorded vasklogistics.online on 2026-03-04. Stored VirusTotal result: 4/91 engines flagged. Retrieved (as stored): 2026-10-06 02:32:55. Risk: critical (81/100). Registrar: Global Domain Group. Status: Last known active. Hosting: velia.net. PhishDestroy sent 1 abuse report. Do not enter credentials or connect a wallet.

Critical

Status: Last known active
VirusTotal: 4 / 91
Scam type (automated label): Impersonation
Hosting: 148.72.153.160velia.net
Registrar: Global Domain Group
Registered: Nov 18, 2025
OTX: 24 community refs
Page captures: 5

Page captures Source results Registration record

Capture recorded with this analysis · Stored capture · Exact capture time not retained
SHA-256: 08da06a5d0a9793c4ee8d3db2914c25bb3f85019c7454fd6a0f9c8708cb148e1

PhishDestroy analysis, reviewed version2026-10-29 17:38:31 UTC

On VirusTotal, security analysis flagged vasklogistics.online with 4 detections out of 91 vendor engines. Specific vendor verdicts include Fortinet and alphaMountain.ai identifying security concerns.

Source evidenceVirusTotal 4 / 91 · OTX 24 references 12 sources

VirusTotal

4 / 91 engine detections

Retrieved / checked: 2026-10-06 02:32:55 · as stored; legacy timezone not established

Open report

URLQuery

1 threat-system alert

2026-03-04 21:59 UTC

Open report

Spamhaus DBL

spam domain

2026-10-12 14:37 UTC

URLScan

Malicious · engine verdict · score 88

2026-03-04 21:57 UTC

Open report

URLScanOriginal source recordObserved: 2026-03-04 21:57:15 UTC25 fields

Observed: 2026-03-04T21:57:15Z · Retrieved: 2026-10-23T00:38:46Z

Report ID

019cbada-c01f-706f-a106-7e4265cc4c5e

Final URL

https://vasklogistics.online/VL-Express/

HTTP response

200

Redirect type

same-domain

Redirects

To
https://vasklogistics.online/VL-Express
From
https://vasklogistics.online/
Status
301
To
https://vasklogistics.online/VL-Express/
From
https://vasklogistics.online/VL-Express
Status
301

IP address

148.72.153.160

Reverse DNS (PTR)

server1.afeeshost.ltd

Contacted domains

www.youtube.com
fonts.gstatic.com
fonts.googleapis.com
jnn-pa.googleapis.com
googleads.g.doubleclick.net
www.google.com
www.gstatic.com
yt3.ggpht.com
i.ytimg.com
static.doubleclick.net

Contacted IP addresses

142.250.66.234
142.250.183.36
142.250.76.99
142.251.222.225
142.250.195.150
142.251.222.230
142.250.66.226
142.250.195.142
142.250.66.238
142.250.183.35
142.250.183.42
148.72.153.160

Autonomous systems (ASN)

15169
30083

Server countries

Linked domains

vasklogistics.com

Document hash

856243e510db7cf15203de74af3f12565df25070eca58b9c983605f666e72d1a

Script hashes
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JavaScript globals

jQuery
wpcargoAJAXHandler
DateFormatter
datetimepickerFactory
Index
EventHandler
SelectorEngine
Data
Manipulator
Config
BaseComponent
Collapse
uidEvent
bootstrap
EvEmitter
imagesLoaded
oceanwpLocalize
oceanwp
jQueryBridget
getSize
matchesSelector
fizzyUIUtils
Flickity
Unipointer
Unidragger
flickrWidgetParams
webpackChunkelementorFrontend
elementorModules
elementorFrontendConfig
elementorFrontend
_
_wpUtilSettings
wp
Picker
um_common_variables
UM
Cropper
um_frontend_common_variables
UM_domenus
UM_check_password_matched

Cookies

YSC
VISITOR_INFO1_LIVE
VISITOR_PRIVACY_METADATA
__Secure-YNID
__Secure-ROLLOUT_TOKEN

Browser storage keys

wpEmojiSettingsSupports

TLS session and certificate

Subject alternative names: *.bentop.com.ng
*.fcitp.online
*.ghecit.online
*.noxmc.online
*.squarecashapp.com
*.vasklogistics.online
*.zebraexpressdelivery.online
bentop.com.ng
fcitp.online
ghecit.online
Cipher: AES_128_GCM
Issuer: R13
Subject: *.fcitp.online
Protocol: QUIC
Valid until: 2026-05-31 19:48:50 UTC
Valid from: 2026-03-02 19:48:51 UTC

Domain age, days

106

Registered domain age, days

106

Certificate age, days

Certificate validity, days

Page requests

151

Provider verdicts

Engine verdict

Tags: urlscan-ml
urlscan-ml-60c5e22
Score: 88
Malicious: Yes

Overall verdict

Score: 0
Malicious: No

HTTP headers

Content-type: text/html; charset=UTF-8
X-powered-by: PHP/8.3.28
Link: <https://vasklogistics.online/VL-Express/wp-json/>; rel="https://api.w.org/" <https://vasklogistics.online/VL-Express/wp-json/wp/v2/pages/120>; rel="alternate"; title="JSON"; type="application/json" <

Original source fields · JSON

Uuid	019cbada-c01f-706f-a106-7e4265cc4c5e
Final url	https://vasklogistics.online/VL-Express/
Status	200
Redirected	same-domain
Redirects	[ { "to": "https://vasklogistics.online/VL-Express", "from": "https://vasklogistics.online/", "status": 301 }, { "to": "https://vasklogistics.online/VL-Express/", "from": "https://vasklogistics.online/VL-Express", "status": 301 } ]
Ip	148.72.153.160
Ptr	server1.afeeshost.ltd
Contacted domains	[ "www.youtube.com", "fonts.gstatic.com", "fonts.googleapis.com", "jnn-pa.googleapis.com", "googleads.g.doubleclick.net", "www.google.com", "www.gstatic.com", "yt3.ggpht.com", "i.ytimg.com", "static.doubleclick.net" ]
Contacted IP addresses	[ "142.250.66.234", "142.250.183.36", "142.250.76.99", "142.251.222.225", "142.250.195.150", "142.251.222.230", "142.250.66.226", "142.250.195.142", "142.250.66.238", "142.250.183.35", "142.250.183.42", "148.72.153.160" ]
Asns	[ "15169", "30083" ]
Countries	[ "US" ]
Linked domains	[ "vasklogistics.com" ]
Document hash	856243e510db7cf15203de74af3f12565df25070eca58b9c983605f666e72d1a
Script hashes	[ "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "7e030c3c95ab087e652c32ad7e822064c8f7aa581d975ca36a79d169350d2701", "2400e8ac88e9858e73b444620c0462ce448c0f6356e07a6c0e50326a0798b457", "2b087356474a3dd31f494cfd5b20121fd804829a1aa28d5df6d291c44ea17b2e", "b61fceac649a114461c1f7197f271b84967d69e05e2a36455a51080b85f13c38", "8eb1ae623d018f62a3bae9fa4afd2ed0568ed1115e97a0e08d924ea894d903f8", "7c0f90a4e22b085e6a623e5a6f35624327cf4baf19091643077eae965435d836", "93526785252f5d55bc86963523700c1aab996942a34a5d6a1c17c328e466ee67", "360dceaa04d4588dd07970debb6ad0c54191e747fd88b6f93bf5381054dd9d80" ]
Globals	[ "jQuery", "wpcargoAJAXHandler", "DateFormatter", "datetimepickerFactory", "Index", "EventHandler", "SelectorEngine", "Data", "Manipulator", "Config", "BaseComponent", "Collapse", "uidEvent", "bootstrap", "EvEmitter", "imagesLoaded", "oceanwpLocalize", "oceanwp", "jQueryBridget", "getSize", "matchesSelector", "fizzyUIUtils", "Flickity", "Unipointer", "Unidragger", "flickrWidgetParams", "webpackChunkelementorFrontend", "elementorModules", "elementorFrontendConfig", "elementorFrontend", "_", "_wpUtilSettings", "wp", "Picker", "um_common_variables", "UM", "Cropper", "um_frontend_common_variables", "UM_domenus", "UM_check_password_matched" ]
Cookies	[ "YSC", "VISITOR_INFO1_LIVE", "VISITOR_PRIVACY_METADATA", "__Secure-YNID", "__Secure-ROLLOUT_TOKEN" ]
Storage keys	[ "wpEmojiSettingsSupports" ]
Tls	{ "san": [ ".bentop.com.ng", ".fcitp.online", ".ghecit.online", ".noxmc.online", ".squarecashapp.com", ".vasklogistics.online", ".zebraexpressdelivery.online", "bentop.com.ng", "fcitp.online", "ghecit.online" ], "cipher": "AES_128_GCM", "issuer": "R13", "subject": ".fcitp.online", "protocol": "QUIC", "valid_to": "2026-05-31T19:48:50Z", "valid_from": "2026-03-02T19:48:51Z" }
Domain age days	106
Apex age days	106
Tls age days	2
Tls valid days	89
Requests	151
Provider verdicts	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 88, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP headers	{ "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.3.28", "link": "<https://vasklogistics.online/VL-Express/wp-json/>; rel=\"https://api.w.org/\"\n<https://vasklogistics.online/VL-Express/wp-json/wp/v2/pages/120>; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n<" }

Separate monitor record · 2026-07-29 02:49 UTC

Separate stored monitor snapshot; does not replace the primary report record or establish current availability.

record_source: domain_monitor.urlscan
uuid: 019cbada-c01f-706f-a106-7e4265cc4c5e
report_url: https://urlscan.io/result/019cbada-c01f-706f-a106-7e4265cc4c5e/
score: 0
malicious: false
result_at: 2026-07-29T02:49:34Z
enriched_at: 2026-03-24T11:58:11Z
source_timestamps: {"urlscan_result_at":"2026-07-29 04:49:34","urlscan_enriched_at":"2026-03-24 12:58:11"}
timestamp_basis: Europe/Berlin, as used by the existing report; source timestamps are retained verbatim

PhishStats

checked — no match recorded

2026-03-05 00:58:39 · check time as stored; timezone unknown

OTX

24 community references

2026-10-29 12:50 UTC

Open report