swifttrustcouriers[.]com

On July 27, 2026, swifttrustcouriers.com was flagged as a generic phishing infrastructure. The domain resolves to the IPv4 address 13.140.180.106 and was registered on January 17, 2026 through TuringSign Inc. d/b/a Cosmotown. Authoritative nameservers are listed as ns10.controlpanelnet.com and ns9.controlpanelnet.com. A VirusTotal analysis was performed by 91 scanning engines; none returned a detection, but the absence of detections is not taken as evidence of legitimacy.

The domain is currently listed on one public security blocklist and has been actively blocked by the PhishDestroy anti‑phishing service. No public records of SSL certificates, HTTP response codes, page titles, or content snapshots are available, leaving the visual and functional characteristics of the site unverified. Infrastructure analysis indicates the hosting environment is shared with other domains under the same control‑panel hosting provider, suggesting the potential for rapid re‑use of the same IP address for additional malicious campaigns.

Defenders should consider adding the domain and its resolver IP to network‑level block lists, enforce DNS sinkholing for the name, and monitor for any new subdomains or related hostnames emerging from the same nameservers. Continuous re‑scanning with VirusTotal and other malware sandboxes is advised, as threat actors may introduce malicious payloads or change the site’s behavior after initial deployment. Organizations should remain vigilant for any email or credential‑harvesting attempts that reference Swift Trust Couriers or related logistics services, given the domain’s apparent targeting of courier‑related brand impersonation.