successfulxpresslogistics[.]com[.]nstexf[.]com

successfulxpresslogistics.com.nstexf.com was registered on February 21 2026 and resolves to the IPv4 address 213.165.249.109, which is hosted by InMotion Hosting, Inc. in the Netherlands under ASN 22611. The web page presented the title “Successfulxpress Logistics | Shipping and Transportation service,” indicating an attempt to impersonate a logistics provider. The campaign is classified as a brand‑impersonation crypto scam, targeting multiple brands (listed as “across”). The SSL certificate received an R10 rating, and the Gridinsoft trust score is 0 out of 100, reflecting a lack of credibility.

VirusTotal analysis recorded a single positive detection out of 93 security vendors, confirming that at least one scanner identified malicious behavior. The domain has been added to one security blocklist and is currently blocked by PhishDestroy. The site was taken offline at the time of reporting on July 24 2026.

Defensive operators should continue to block the domain and its hosting IP, monitor for any re‑use of the same infrastructure, and update URL filtering policies. Because the page title and SSL rating are publicly observable, analysts can corroborate the malicious intent without needing to retrieve the page content. Ongoing vigilance is advised, especially given the low trust scores and the presence of a single vendor flag, which suggests that the threat may evolve or reappear under a different subdomain.