courier[.]santoshinakomotobtcpull[.]com

This domain carries an elevated risk level and is classified as a generic phishing threat, meaning it attempts to trick users into revealing sensitive information by impersonating a legitimate service. The domain was taken offline after being flagged, but users who may have interacted with it should remain vigilant.

PhishDestroy identified that courier.santoshinakomotobtcpull.com appears on one security blocklist and was flagged by 5 out of 95 security vendors on VirusTotal. The domain was registered through NameSilo, LLC on June 05, 2025, and resolves to IP address 198.12.93.82. It had no SSL certificate, further indicating its untrustworthy nature. The page title was "Courier Santoshinakomotobtcpull | Homepage," suggesting it impersonated a courier service to harvest login credentials or personal data.

To stay safe, users should avoid entering any personal information on such sites. If credentials were entered, they should be changed immediately on the legitimate platform. Enabling multi-factor authentication on accounts adds an extra layer of protection. Monitoring financial statements and credit reports for unusual activity is also recommended. PhishDestroy advises reporting any suspicious domains to relevant authorities or security vendors.