redrosepackers[.]com

Analysis of the domain redrosepackers.com indicates active phishing infrastructure impersonating a packers and movers service in Bhagalpur. The domain, registered on December 14, 2013, resolves to IP 185.131.55.234 (AS146943, India) and currently returns an HTTP 302 redirect. Page metadata reveals the title 'Packers and Movers Bhagalpur | Call +91-8877777793,' suggesting a targeted impersonation of a local logistics service. Trust scores are minimal, with Gridinsoft assigning a 0/100 rating, and the domain appears on one security blocklist. AlienVault OTX records it in two threat intelligence pulses, while four of 91 security vendors on VirusTotal flag the domain as malicious. Infrastructure analysis shows the use of Apache HTTP Server, Bootstrap, jQuery, Google Analytics, and other common web technologies, which may aid in blending with legitimate traffic. The domain hosts its own MX record (priority 10), potentially enabling email-based phishing campaigns. SSL certification is provided by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. The domain remains active as of July 12, 2026, with no evidence of takedown or remediation. Defenders should treat this domain as high-risk due to its confirmed presence on blocklists, low trust scores, and association with known phishing activity. The combination of a long-standing registration, active hosting, and targeted impersonation of a local service increases the likelihood of successful social engineering. Network-level blocking of 185.131.55.234 and monitoring for related domains or subdomains is recommended. No further details on the exact phishing mechanics or payloads are available at this time.