pintranxpresslogistics[.]com

This domain, pintranxpresslogistics.com, is flagged as an active credential phishing threat targeting logistics and shipping sectors. Registered on February 21, 2026, through Global Domain Group LLC, the domain resolves to 144.76.18.104, hosted on AS24940 (Hetzner Online GmbH) in Germany. Infrastructure analysis reveals the use of Apache HTTP Server and jQuery, with a Let's Encrypt SSL certificate (R13) and an HTTP 200 status, indicating the site is operational. The page title, 'Pintran Xpress Logistics - International Logistics,' suggests an attempt to mimic a legitimate logistics provider, though no specific brand impersonation has been confirmed beyond this title. The domain appears on one security blocklist and is blocked by PhishDestroy. Nameservers are ns1.vslconceptshost.com and ns2.vslconceptshost.com, while MX records point solely to the domain itself, a common tactic to appear legitimate for email-based phishing. Two of 95 security vendors on VirusTotal have flagged this domain, though this does not provide conclusive evidence of malicious activity alone. Defenders should treat this domain as high-risk, particularly for credential harvesting targeting logistics or shipping employees. Immediate actions include blocking the domain and IP at network perimeter devices, monitoring for internal traffic to this address, and reviewing email logs for messages containing this domain or related URLs. Further analysis of the site's content is recommended to determine specific phishing mechanisms, though no visual or structural details are currently available for assessment.