gwecs-courier[.]us
“GWEC Courier Logistic, Delivery and Transportation”
gwecs-courier.us — 未验证. 品牌冒充:Across; 诈骗类型:Generic Phishing. 证据摘要: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); PhishDestroy score 65/100. 注册商: Global Domain Group.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain gwecs-courier.us was a brand-impersonation phishing site that posed as 'across' in a shipping scam. It displayed the page title 'GWEC Courier Logistic, Delivery and Transportation' and is currently taken offline. No crypto drainer kit was identified; the specific threat was credential harvesting or fraudulent delivery fees under the guise of a legitimate courier service.
Technical indicators show gwecs-courier.us had 0 of 95 VirusTotal vendors flagging it, was not listed by Google Safe Browsing, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Global Domain Group LLC on 2025-08-15 12:42:03 and resolved to IP address 163.61.188.89, hosted on AS153568 NEW DHAKA HARDWARE in the US. No SSL certificate was present, and nameservers were vip1.cupisweb.com and vip2.cupisweb.com. Gridinsoft assigned a trust score of 0/100.
Individuals who interacted with gwecs-courier.us should change any passwords entered on the site, enable two-factor authentication on relevant accounts, and monitor for unauthorized transactions or shipping-related fraud. Report the domain to local cybercrime units, the impersonated brand 'across', and platforms like PhishTank or the Anti-Phishing Working Group to aid in takedown efforts.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。