roverexaxis[.]com[.]chommysbakery[.]shop

Analysis of www.roverexaxis.com.chommysbakery.shop shows that the site was provisioned on March 11, 2026 through the registrar Turingsign Inc. The domain resolves to the IPv4 address 192.142.54.88, which is announced by AS214036 (Ultahost, Inc.) and geolocated to the Netherlands. DNS resolution is served by ns1.hostcreed.com and ns2.hostcreed.com. The TLS certificate is a Let’s Encrypt R13 issuance, indicating standard automated certification without extended validation. The public page title reads "Roverex Axis, Your trusted partner for reliable logistics services," suggesting a fabricated logistics brand.

The web stack reports PHP, LiteSpeed, Smartsupp and HTTP/3, all of which are common in low‑cost hosting environments. Security‑vendor scans on VirusTotal returned 2 positive detections out of 94 vendors, confirming malicious intent, and the domain appears on a single external blocklist. PhishDestroy has already listed the domain as hostile. Current host status is offline, which may indicate takedown or temporary suspension.

Defenders should immediately block the domain and its IP address at perimeter filters, DNS resolvers, and endpoint protection solutions. Continuous monitoring of the host ASN (AS214036) and the registrar Turingsign Inc. is advised, as similar domains may be registered using the same infrastructure. Because the site’s content beyond the title has not been captured, further reconnaissance should focus on any residual URLs or sub‑domains that may still resolve, and on correlating traffic logs for connections to 192.142.54.88 to identify potential victim exposure.