equity-express[.]us

This domain, equity-express.us, is flagged as a credential theft operation impersonating a legitimate courier and logistics service under the name "Equity Express Courier Logistic, Delivery and Transportation." Analysis indicates no direct association with known crypto drainer kits or blockchain-specific threats, but the infrastructure and content are consistent with credential harvesting schemes targeting business clients, shipping partners, or end-users expecting package delivery notifications. The site mimics operational logistics platforms to solicit login credentials, payment details, or personal information under false pretenses. Infrastructure analysis reveals multiple high-risk technical indicators. The domain was registered on November 19, 2024, through OwnRegistrar, Inc., and resolves to the IP address 163.61.188.89, hosted under AS153568 (NEW DHAKA HARDWARE), an autonomous system with a history of abuse. The site lacks an SSL certificate, exposing all transmitted data to interception. VirusTotal detection shows 1 out of 95 security vendors flagging the domain, while PhishDestroy has explicitly blocked it. The domain appears on one security blocklist, and no entries were found in Google Safe Browsing at the time of assessment. Current status remains active, with no evidence of takedown or mitigation. The absence of SSL, recent registration, and association with a low-reputation hosting provider elevate the risk profile. Users and organizations are advised to block the domain at the network level, avoid interaction with any communications claiming affiliation, and verify courier services through official channels only. Given the domain's active status and targeted impersonation of a logistics brand, continued monitoring and proactive filtering are recommended to prevent credential compromise or financial fraud.