Keamanan domain dan intelijen ancaman

primeexpressdelivery.com

Name: primeexpressdelivery.com — PhishDestroy evidence record
Published: 2026-10-26
License: https://creativecommons.org/licenses/by/4.0/

Ringkasnya

primeexpressdelivery.com: Domain dalam daftar blokir, terdeteksi oleh PhishDestroy pada 2026-10-26.

“Prime Express Delivery - Home”

Tinjau bukti

Registrar: Dynadot
Resolved IP: 198.251.81.14
Terdaftar: 27/08/2026

Penilaian PhishDestroy Tinggi

67/100

Skor bukti

Ketersediaan Terakhir diketahui aktif Pengamatan keterjangkauan tersimpan terbaru Teramati 26 Okt 2026 · 07:41 UTCPemeriksaan HTTP

Sinyal risiko

Deteksi Total Virus: 1/92

VirusTotal

1 / 92

deteksi mesin · 2026-10-26

OTX

referensi komunitas

Cloudflare Radar

—

Tidak tercatat

Tangkapan halaman

buka galeri

Usia domain

59 days

Laporan terkirim

—

Tidak ada catatan yang terkirim

Ringkasan laporan

Domain dalam daftar blokir: primeexpressdelivery.com — Terakhir diketahui aktif (HTTP 200). Ringkasan bukti: VirusTotal 1/92 (desenmascara.me); URLQuery 2…

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Analisis

Laporan Ancaman PhishDestroy2026-10-26 07:33:29 UTC

Overview

PhishDestroy added primeexpressdelivery.com to its internal blocklist on 2026-10-26. The intake system noted that the fetched page displayed only a bot verification challenge, providing no clear indication of malicious intent.

How the scam works

The current evidence does not point to a particular fraud technique. Domains that present only a verification page can later host phishing, credential harvesting, or other fraudulent content, but no such behavior was observed here.

Bukti

VirusTotal reported one malicious detection out of 92 engines on 2026-10-25, with desenmascara.me labeling the domain as malicious. Google Safe Browsing checked on 2026-10-26 and did not flag the site. URLScan captured the site on 2026-10-17; its overall verdict was clean, though its engine scored the URL as malicious with a 98 confidence score. OTX listed two pulses referencing the domain on 2026-10-26, and PhishDestroy’s internal blocklist marked it as blocked while external blocklists returned zero hits on the same date.

Infrastruktur

The domain was registered with Dynadot Inc on 2026-08-27 and resolves to the IP address 198.251.81.14, which is associated with FranTech Solutions in the United States. A Let’s Encrypt TLS certificate covering *.primeexpressdelivery.com was issued on 2026-09-08 and is valid until 2026-12-07. DNS records include standard A, MX, NS and TXT entries; DNSSEC is not enabled.

What to do

Do not submit credentials, personal data, or payment information to the site; if any were entered, change the associated passwords and monitor accounts for unusual activity. Network defenders should add primeexpressdelivery.com to internal threat feeds and block traffic to this exact domain while reviewing server logs for any requests to it. No broader IP or hosting provider blocking is recommended based on the available evidence.

Bukti sumberVirusTotal 1 / 92 · OTX 2 references 8 sources

VirusTotal

1 / 92 deteksi mesin · ringkasan yang tersimpan

2026-10-26 07:31 UTC

Buka laporan

VirusTotalCatatan asli sumberTeramati: 2026-10-25 08:31:33 UTC14 kolom

Teramati: 2026-10-25T08:31:33Z · Diambil: 2026-10-26T07:31:52Z

Jumlah hasil vendor

Waktu habis: 0
Tidak berbahaya: 52
Berbahaya: 1
Mencurigakan: 0
Tidak terdeteksi: 39

Label pemasok

desenmascara.me: malicious

Skor reputasi

Registrar

Dynadot Inc

Dibuat

2026-08-27 10:24:50 UTC

Berlaku hingga

2027-08-27 10:24:50 UTC

Diperbarui

2026-09-08 03:13:39 UTC

Pertama terlihat

2024-01-14 08:03:20 UTC

Catatan DNS

TTL, detik
3600
Jenis
TXT
Nilai
v=spf1 a mx ip4:198.251.81.14 ip4:65.21.92.21 ~all
TTL, detik
3600
Jenis
MX
Nilai
mail.primeexpressdelivery.com
Prioritas
10
TTL, detik
3600
Jenis
A
Nilai
198.251.81.14
TTL, detik
3600
Jenis
NS
Nilai
ns20.my-control-panel.com
TTL, detik
3600
Jenis
NS
Nilai
ns19.my-control-panel.com
TTL, detik
3600
Jenis
SOA
Alamat penanggung jawab
hostmaster.primeexpressdelivery.com
Nilai
ns19.my-control-panel.com

Waktu pengambilan catatan DNS

2026-10-25 08:36:58 UTC

Sidik jari JARM

27d27d27d00027d1dc42d43d00041df4121c1aee00c36f8f9360f0e4077fce

Sertifikat

Nama alternatif subjek (SAN): *.primeexpressdelivery.com
primeexpressdelivery.com
Penerbit: Let's Encrypt / YE1
Nomor seri: 5d2c67c9e26a5a281fcb853d0013839a08f
SHA-256: 080e488094342d7405e795a878549b6f65b91babff955468516bd34285957875
Subjek: primeexpressdelivery.com
Berlaku hingga: 2026-12-07 02:23:56 UTC
Berlaku sejak: 2026-09-08 02:23:57 UTC

Catatan pendaftaran

Registrar: Dynadot Inc
ID IANA registrar: 472
URL registrar: http://www.dynadot.com
Terdaftar: 2026-08-27 10:24:50 UTC
Diperbarui: 2026-09-08 03:13:39 UTC
Berlaku hingga: 2027-08-27 10:24:50 UTC
Status: clientTransferProhibited
Server nama: ns19.my-control-panel.com
ns20.my-control-panel.com
DNSSEC: unsigned

Data registri (RDAP)

Status

transfer prohibited

Peristiwa registri

Berakhirnya pendaftaran: 2027-08-27 10:24:50 UTC
Terakhir diubah: 2026-09-08 03:13:39 UTC
Pendaftaran: 2026-08-27 10:24:50 UTC
Berakhir di registrar: 2027-08-27 10:24:50 UTC
Pembaruan terakhir basis data RDAP: 2026-10-23 11:09:10 UTC

Kolom asli sumber · JSON

Jumlah hasil vendor	{ "timeout": 0, "harmless": 52, "malicious": 1, "suspicious": 0, "undetected": 39 }
Label pemasok	{ "desenmascara.me": "malicious" }
Reputasi	0
Registrar	Dynadot Inc
Dibuat	2026-08-27T10:24:50Z
Berlaku hingga	2027-08-27T10:24:50Z
Diperbarui	2026-09-08T03:13:39Z
Pertama terlihat	2024-01-14T08:03:20Z
Catatan DNS	[ { "ttl": 3600, "type": "TXT", "value": "v=spf1 a mx ip4:198.251.81.14 ip4:65.21.92.21 ~all" }, { "ttl": 3600, "type": "MX", "value": "mail.primeexpressdelivery.com", "priority": 10 }, { "ttl": 3600, "type": "A", "value": "198.251.81.14" }, { "ttl": 3600, "type": "NS", "value": "ns20.my-control-panel.com" }, { "ttl": 3600, "type": "NS", "value": "ns19.my-control-panel.com" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.primeexpressdelivery.com", "value": "ns19.my-control-panel.com" } ]
Dns at	2026-10-25T08:36:58Z
Jarm	27d27d27d00027d1dc42d43d00041df4121c1aee00c36f8f9360f0e4077fce
Sertifikat	{ "san": [ "*.primeexpressdelivery.com", "primeexpressdelivery.com" ], "issuer": "Let's Encrypt / YE1", "serial": "5d2c67c9e26a5a281fcb853d0013839a08f", "sha256": "080e488094342d7405e795a878549b6f65b91babff955468516bd34285957875", "subject": "primeexpressdelivery.com", "valid_to": "2026-12-07T02:23:56Z", "valid_from": "2026-09-08T02:23:57Z" }
Catatan pendaftaran	{ "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-08-27T10:24:50Z", "updated": "2026-09-08T03:13:39Z", "expires": "2027-08-27T10:24:50Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns19.my-control-panel.com", "ns20.my-control-panel.com" ], "dnssec": "unsigned" }
Data registri	{ "status": [ "transfer prohibited" ], "events": { "expiration": "2027-08-27T10:24:50Z", "last changed": "2026-09-08T03:13:39Z", "registration": "2026-08-27T10:24:50Z", "registrar expiration": "2027-08-27T10:24:50Z", "last update of RDAP database": "2026-10-23T11:09:10Z" } }

Catatan sumber terpisah · 1 malicious + 0 suspicious / 92 · 2026-10-25 08:31:33 UTC

Ringkasan di atas dan catatan penyedia ini dikumpulkan pada waktu yang berbeda. Keduanya tetap tersedia; klasifikasi berbahaya dan mencurigakan ditampilkan secara terpisah.

record_source: collected_observations.vt
analysis_at: 2026-10-25T08:31:33Z
fetched_at: 2026-10-26T07:31:52Z
stats: {"timeout":0,"harmless":52,"malicious":1,"suspicious":0,"undetected":39}

URLQuery

2 det.

Tidak tercatat

Buka laporan

URLScan

Berbahaya · putusan mesin · skor 98

2026-10-26 07:40 UTC

Buka laporan

URLScanCatatan asli sumberTeramati: 2026-10-26 07:40:33 UTC24 kolom

Teramati: 2026-10-26T07:40:33Z · Diambil: 2026-10-26T08:42:46Z

ID laporan

01a17727-411a-751f-bc85-107949dc4f0e

URL Akhir

https://primeexpressdelivery.com/

Respons HTTP

200

Jenis pengalihan

https-only

Pengalihan

Ke
https://primeexpressdelivery.com/
Dari
http://primeexpressdelivery.com/
Status
307

Alamat IP

198.251.81.14

DNS balik (PTR)

s13.my-control-panel.com

Domain yang dihubungi

fonts.gstatic.com
embed.tawk.to
images.pexels.com
cdn.jsdelivr.net
fonts.googleapis.com
va.tawk.to
cdnjs.cloudflare.com

Alamat IP yang dihubungi

142.251.20.94
104.20.42.169
104.18.66.220
104.17.208.5
142.251.110.95
104.17.25.14
198.251.81.14

Sistem otonom (ASN)

15169
13335
53667

Negara server

Hash dokumen

285f248d8156d4c9add3f6986969d27312006e756f4d41d7ea8ff6f053018307

Hash skrip

6fa15985f06cd3b67c587838206e95d4f7c3b0eadb91055a6ca054ce69586ec5
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d
46f751d69294443d4748a11c411ea8818d9102ec3b47735cdd0434034602755c
1e0c2ad4e069276efa1d43fd1f7549912bfd64219119037e26574f27ca4d7143

Variabel global JavaScript

Tawk_API
Tawk_LoadStart
uidEvent
bootstrap
$_Tawk_AccountKey
$_Tawk_WidgetId
$_Tawk_Unstable
$_Tawk
$
jQuery
toastr
__VUE_INSTANCE_SETTERS__
__VUE_SSR_SETTERS__
$__TawkEngine
EventEmitter
$__TawkSocket
__i18next_supportNoticeShown
counters
speed

Cookie

ci_session
__cf_bm
_cfuvid
twk_idm_key
TawkConnectionTime

Kunci penyimpanan browser

exist_test

Sesi TLS dan sertifikat

Nama alternatif subjek (SAN): *.primeexpressdelivery.com
primeexpressdelivery.com
Cipher suite: AES_128_GCM
Penerbit: YE1
Subjek: primeexpressdelivery.com
Protokol: TLS 1.3
Berlaku hingga: 2026-12-07 02:23:56 UTC
Berlaku sejak: 2026-09-08 02:23:57 UTC

Usia domain, hari

2073

Usia domain terdaftar, hari

2073

Usia sertifikat, hari

Masa berlaku sertifikat, hari

Permintaan halaman

Keputusan penyedia layanan

Putusan mesin

Tag: urlscan-ml
urlscan-ml-60c5e22
Skor: 98
Berbahaya: Ya

Putusan keseluruhan

Skor: 0
Berbahaya: Tidak

Header HTTP

Server: LiteSpeed
Content-type: text/html; charset=UTF-8

Kolom asli sumber · JSON

Uuid	01a17727-411a-751f-bc85-107949dc4f0e
Final url	https://primeexpressdelivery.com/
Status	200
Dialihkan	https-only
Pengalihan	[ { "to": "https://primeexpressdelivery.com/", "from": "http://primeexpressdelivery.com/", "status": 307 } ]
Ip	198.251.81.14
Ptr	s13.my-control-panel.com
Domain yang dihubungi	[ "fonts.gstatic.com", "embed.tawk.to", "images.pexels.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "va.tawk.to", "cdnjs.cloudflare.com" ]
Alamat IP yang dihubungi	[ "142.251.20.94", "104.20.42.169", "104.18.66.220", "104.17.208.5", "142.251.110.95", "104.17.25.14", "198.251.81.14" ]
Asns	[ "15169", "13335", "53667" ]
Countries	[ "US" ]
Hash dokumen	285f248d8156d4c9add3f6986969d27312006e756f4d41d7ea8ff6f053018307
Hash skrip	[ "6fa15985f06cd3b67c587838206e95d4f7c3b0eadb91055a6ca054ce69586ec5", "a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74", "a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d", "46f751d69294443d4748a11c411ea8818d9102ec3b47735cdd0434034602755c", "1e0c2ad4e069276efa1d43fd1f7549912bfd64219119037e26574f27ca4d7143" ]
Globals	[ "Tawk_API", "Tawk_LoadStart", "uidEvent", "bootstrap", "$_Tawk_AccountKey", "$_Tawk_WidgetId", "$_Tawk_Unstable", "$_Tawk", "$", "jQuery", "toastr", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "$__TawkEngine", "EventEmitter", "$__TawkSocket", "__i18next_supportNoticeShown", "counters", "speed" ]
Cookie	[ "ci_session", "__cf_bm", "_cfuvid", "twk_idm_key", "TawkConnectionTime" ]
Storage keys	[ "exist_test" ]
Tls	{ "san": [ "*.primeexpressdelivery.com", "primeexpressdelivery.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "primeexpressdelivery.com", "protocol": "TLS 1.3", "valid_to": "2026-12-07T02:23:56Z", "valid_from": "2026-09-08T02:23:57Z" }
Usia domain (hari)	2073
Apex age days	2073
Tls age days	48
Masa berlaku TLS (hari)	89
Permintaan	43
Keputusan penyedia layanan	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }
Header HTTP	{ "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8" }

Catatan monitor terpisah · tanggal tidak tercatat

Cuplikan monitor yang disimpan secara terpisah; tidak menggantikan catatan laporan utama atau menentukan ketersediaan saat ini.

record_source: domain_monitor.urlscan
uuid: 01a1498c-3025-75b8-9309-c7a1b87153f0
report_url: https://urlscan.io/result/01a1498c-3025-75b8-9309-c7a1b87153f0/
skor: null
malicious: null
result_at: null
enriched_at: 2026-10-26T09:11:17Z
source_timestamps: {"urlscan_result_at":null,"urlscan_enriched_at":"2026-10-26 10:11:17"}
timestamp_basis: Eropa/Berlin, sebagaimana digunakan dalam laporan yang ada; cap waktu sumber dipertahankan apa adanya

OTX

2 community references

2026-10-26 07:32 UTC

Buka laporan

Cloudflare Radar

Laporan pemindaian

Tidak tercatat

Buka laporan

Cloudflare RadarCatatan asli sumberTeramati: 2026-10-26 07:32:01 UTC12 kolom

Teramati: 2026-10-26T07:32:01Z · Diambil: 2026-10-26T07:32:26Z

ID laporan

ac12183f-e7cc-4717-8035-8ee92bf902d7

URL Akhir

https://primeexpressdelivery.com/

Respons HTTP

200

Riwayat navigasi

URL
https://primeexpressdelivery.com/
Status
200

Hash struktur DOM

8588cb903bda346aadc77e2ace275b3f13a535fba0475f57d60825f1910b4be7

Hash dokumen

285f248d8156d4c9add3f6986969d27312006e756f4d41d7ea8ff6f053018307

Kategori risiko domain

Business
Business & Economy