propinecargoexpress[.]com[.]oceanstourdeliveryservice[.]info

Analysis indicates that the domain propinecargoexpress.com.oceanstourdeliveryservice.info was registered on 21 February 2026. The domain resolves to IP 163.61.188.92, which is announced by ASN 153568 and is geolocated to the United States. The autonomous system is registered to NEW DHAKA HARDWARE, a hosting provider that has appeared in prior malicious‑infrastructure observations. The SSL certificate associated with the host receives an R10 rating, indicating a low‑trust certificate from an untrusted authority. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating, suggesting that the site fails basic reputation checks.

Two of ninety‑three VirusTotal scanners have flagged the domain, confirming that a minority of automated detection engines consider the host malicious. The domain appears on a single external blocklist and is actively blocked by the PhishDestroy mitigation service. The page title returned by the HTTP response is "Propine Cargo Express Logistic, Delivery and Transportation," which aligns with the declared delivery‑scam theme. The site is currently offline, which may be the result of takedown actions or temporary hosting issues, but the historical evidence remains relevant for defenders.

Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms that may have been served when the site was live, because no content analysis is available. The limited detection count and single blocklist entry suggest that the domain has not achieved widespread distribution, yet the combination of a zero trust score, low‑grade SSL, and affiliation with a hosting ASN known for abuse elevates its risk profile. Defensive operators should add the full hostname to DNS‑based blocklists, enforce outbound filtering for the resolved IP address, and monitor any future resolution of the parent domain oceanstourdeliveryservice.info for similar subdomains.