Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
primefitexpressdelivery[.]pro
“Account Suspended”
Riepilogo delle prove
This domain, primefitexpressdelivery.pro, is flagged for hosting a delivery scam, a threat type designed to deceive users into divulging personal or financial information under the guise of parcel tracking or shipping notifications. The risk level is classified as elevated due to confirmed malicious infrastructure and active exploitation patterns observed in similar campaigns. Analysis indicates the domain is no longer operational, currently displaying an 'Account Suspended' page, but prior activity warrants scrutiny for historical and potential residual threats. Infrastructure analysis reveals the domain was registered on March 06, 2026, through Dynadot LLC, a registrar frequently associated with low-reputation domains. It resolves to the IP address 66.45.23.50, hosted on AS19853 (OrangeHost) in the United States. The domain appears on one security blocklist and is flagged by 9 out of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. The SSL certificate is issued by Let’s Encrypt (R13), a common choice for both legitimate and fraudulent sites due to its accessibility. Additional blocking is confirmed by PhishDestroy, further validating its classification as a delivery scam. Mitigation steps for this threat type include immediate blocking of the domain and its associated IP (66.45.23.50) at the network perimeter to prevent accidental access. Organizations should review logs for any prior interactions with this domain, particularly in email or web traffic, to identify potential compromise. Users who may have engaged with the site should be advised to reset credentials for any accounts linked to shipping or financial services, as delivery scams often harvest login details. Security teams should monitor for domains registered through the same registrar (Dynadot LLC) or hosted on the same IP range, as threat actors frequently reuse infrastructure. Proactive measures include educating users on recognizing delivery scam tactics, such as unsolicited tracking notifications or requests for payment to release held packages.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260306-F324CD- Titolo della pagina acquisita
- Primefit Express Delivery & Logistic Services
- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | primefitexpressdelivery.pro |
malicious | Sinkholed |
| DigiCert UltraDNS | primefitexpressdelivery.pro |
malicious | Sinkholed |
| DNS4EU | primefitexpressdelivery.pro |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
0 → 9
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo