fastmovedeliverycompany[.]com

Analysis of fastmovedeliverycompany.com indicates a confirmed phishing domain impersonating Google, currently offline as of July 23, 2026. The domain was registered on January 14, 2025, through NameSilo, LLC, and resolves to IP address 102.209.117.141, hosted on AS329184 (Host Africa (Pty) Ltd) in South Africa. No SSL certificate was detected, increasing susceptibility to interception or manipulation. The page title, 'Fastmove Delivery Company | Homepage,' suggests an attempt to mimic a legitimate delivery or logistics service, though the exact content and functionality remain unconfirmed due to its offline status. The domain appears on one security blocklist and is blocked by PhishDestroy.

Scamadviser assigned a trust score of 1 out of 100, reflecting high-risk indicators. Twelve of 95 security vendors on VirusTotal flagged the domain as malicious. Nameservers dan1.host-ww.net and dan2.host-ww.net are associated with the infrastructure, though further historical or related domain linkages are not provided in available data. Defenders should treat this domain as compromised infrastructure.

While offline, it may resurface under the same or altered nameservers, IP, or registrar. Monitoring for re-registration or DNS changes is recommended. Organizations should update blocklists to include this domain and its associated IP, particularly those protecting users from brand impersonation or credential theft attempts. No evidence currently links this domain to a specific phishing kit or campaign beyond Google impersonation, and further forensic analysis would be required to determine payload delivery mechanisms or victim targeting patterns.