sunsetexpreslin[.]com

sunsetexpreslin.com is a phishing domain involved in brand impersonation targeting Google users. The site was used in a tech support scam and is currently taken offline. There is no evidence of a drainer kit associated with this domain. Users searching if sunsetexpreslin.com is safe or a scam should be aware that it posed an elevated risk due to its deceptive intent to impersonate a well-known brand.

Technical analysis of sunsetexpreslin.com reveals it was created on July 17, 2025, and registered through HOSTINGER operations, UAB. The domain resolves to IP address 172.245.14.131 located in the US under AS36352 HostPapa. It uses an SSL certificate issued by R10. VirusTotal detected the domain as malicious by 1 of 95 security vendors, including Gridinsoft, which assigned a trust score of 0 out of 100. The domain appears on 1 security blocklist, PhishDestroy. The observed page title was Sunset Expressline Logistics | Homepage, which attempts to disguise the phishing activity.

Users who suspect interaction with sunsetexpreslin.com should change any credentials potentially submitted, enable two-factor authentication, and monitor accounts for fraudulent activity. Since this is a brand impersonation phishing scam targeting Google users, vigilance for phishing emails or messages referencing this domain is advised. Suspicious activity can be reported to security vendors and organizations maintaining blocklists such as PhishDestroy to aid in mitigation efforts.