expressexpertdelivery[.]com

The domain expressexpertdelivery.com was a phishing site engaged in brand impersonation, specifically targeting Google as part of a tech-support scam. It posed as a legitimate delivery or technology service but was designed to deceive users into divulging sensitive information or installing malicious software. No crypto drainer kit was associated with this domain. As of the latest verification, expressexpertdelivery.com has been taken offline, though its prior activity warrants caution for those who may have interacted with it.

Technical indicators confirm the malicious nature of expressexpertdelivery.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0 out of 100. It appeared on 1 security blocklist, PhishDestroy, but was not flagged by Google Safe Browsing. Registered through Atak Domain Bilgi Teknolojileri A.S. on May 29, 2023, the domain resolved to the IP address 198.12.66.123, hosted by AS36352 HostPapa in the US. The SSL certificate was issued by R11, and the observed page title was 'Using technology to ease delivery services for our clients.'

Users who encountered expressexpertdelivery.com should take immediate safety steps. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand, Google, via their official reporting channels. Additionally, report the domain to anti-phishing organizations such as the Anti-Phishing Working Group (APWG) or the Federal Trade Commission (FTC) to aid in broader mitigation efforts.