ordercarryinchina[.]com

This domain, ordercarryinchina.com, is identified as a fake e-commerce phishing site designed to impersonate legitimate order fulfillment platforms. Analysis indicates the infrastructure is engineered to harvest user credentials, payment details, and personal information under the guise of a China-based logistics service. The domain is currently offline, though its prior operational status suggests it may have been active in targeted phishing campaigns. Infrastructure analysis reveals the domain was registered through Global Domain Group LLC on February 21, 2026, and resolves to the IP address 154.89.7.100. It is flagged by 2 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The site appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include WordPress, Cart Functionality, MySQL, PHP, LiteSpeed, OWL Carousel, jQuery Migrate, and jQuery, which are consistent with typical phishing site frameworks. The SSL certificate is issued by Let’s Encrypt, a common choice for malicious actors due to its low barrier to entry. The current offline status does not eliminate the risk, as domains of this nature are frequently reactivated or repurposed. Organizations and individuals are advised to block the domain and its associated IP at the network level. End users should be alerted to the threat, particularly if they have interacted with the site or received communications referencing it. Monitoring for related domains registered through the same registrar or resolving to the same IP range is recommended to identify potential secondary infrastructure. Historical logs should be reviewed for any prior connections to 154.89.7.100 or ordercarryinchina.com to assess potential exposure.