infinityxpressdeliveryltd[.]com

Analysis of infinityxpressdeliveryltd.com, first seen on February 21, 2026, indicates that the domain was created through Web Commerce Communications Limited and assigned the authoritative name servers ns100.webnic.cc and ns101.webnic.cc. DNS resolution points to the IP address 198.12.80.250, which is hosted in the United States by the HostPapa provider. The domain has been listed on a single public blocklist and is currently flagged by the PhishDestroy service, confirming its classification as a delivery‑related scam.

VirusTotal scans have recorded 12 positive detections out of 93 submitted security engines, reinforcing the malicious assessment. The site’s operational status is reported as offline, and no additional evidence such as SSL certificates, HTTP response codes, or page titles has been published. Consequently, the observable infrastructure consists solely of the registration record, name server delegation, hosting IP, and the blocklist entry.

Uncertainty remains regarding the exact content served, the phishing kit employed, and any victim interaction pathways. Defenders should block or sinkhole the domain, monitor DNS queries for the associated IP and name servers, and add the domain to internal threat intelligence feeds. Ongoing observation of the hosting provider and related domains is advised to detect potential re‑use of the same infrastructure.