charlottethomasca[.]com[.]knpcourierservice[.]com

The domain www.charlottethomasca.com.knpcourierservice.com, once active, is now offline, having been flagged by one VirusTotal vendor as malicious. This domain was registered with Hosting Concepts B.V. and hosted on an IP address in the Netherlands under Host Sailor Ltd's ASN. Despite its offline status, it was previously detected by PhishDestroy on June 19, 2026, indicating it was part of a phishing operation.

The domain's page title, "Charlotte Thomas Comsult," suggests a potential attempt to impersonate a legitimate business, though no specific brand was identified in the data. The SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its ease of access and cost-free nature. The domain's platform risk score of 56 out of 100 and an abuse score of 19 out of 100 reflect moderate risk levels during its period of activity.

Phishing domains like this one often exploit the gap between registration and detection by antivirus vendors. With only one VirusTotal detection, the domain likely operated within this window to evade broader security measures. This highlights the importance of early detection systems like PhishDestroy, which identified the threat well before it became widely flagged. While the domain is no longer active, its existence underscores the ongoing threat posed by phishing operations targeting unsuspecting users.