movexpressdrop[.]com

This domain, movexpressdrop.com, is identified as a generic phishing site targeting users through a fraudulent courier or express delivery service facade. The page title, Move Express Drop | Express Delivery, Courier, suggests an attempt to impersonate legitimate logistics providers, likely aiming to harvest credentials, payment details, or personal information from victims under the pretense of parcel tracking or delivery notifications. No specific brand impersonation or drainer kit signatures were confirmed in initial analysis, but the use of common web technologies (Bootstrap, jQuery, OWL Carousel) indicates a templated approach typical of low-to-moderate sophistication phishing operations.

Technical indicators confirm elevated risk: the domain was registered on November 10, 2025, via Dynadot Inc, and resolves to IP address 163.61.188.7. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, while Gridinsoft and Scamadviser assign trust scores of 29/100 and 31/100, respectively. The domain appears on two security blocklists and is actively blocked by PhishDestroy and OISD. Google Safe Browsing status was not explicitly provided, but the combination of low trust scores and blocklist presence further corroborates its malicious classification.

As of the latest assessment, movexpressdrop.com has been marked as taken_down, indicating that hosting or DNS resolution has been disrupted. However, residual risk persists due to potential domain re-registration, IP reuse, or migration of the phishing infrastructure to new endpoints. Users who interacted with the site should assume credential exposure and monitor for unauthorized transactions or identity misuse. Organizations are advised to update blocklists with the domain and associated IP, while individuals should verify delivery notifications through official courier channels only, avoiding links from unsolicited communications.