rapidexpresscargo[.]com

Analysis of rapidexpresscargo.com indicates a confirmed phishing site targeting logistics and courier services, as evidenced by its infrastructure and threat intelligence signals. The domain, registered on February 21, 2026, through a hosting provider, currently resolves to 163.61.188.92, an IP address geolocated in the United States under AS153568 (NEW DHAKA HARDWARE). The site returns an HTTP 200 status, suggesting it is actively serving content, and its page title, 'RapidExpressCargo - Reliable Cargo,' aligns with a courier or shipping service theme, though the exact content and legitimacy of the site have not been verified through direct inspection. Infrastructure analysis reveals the use of nameservers ns1.dns-parking.com and ns2.dns-parking.com, a pattern commonly observed in low-cost or disposable domain setups. The SSL certificate is issued by Let's Encrypt, a legitimate provider, but this does not mitigate the domain's malicious classification, as phishing sites frequently use valid certificates to appear trustworthy. The domain is hosted on a platform utilizing Nginx, OpenResty, and Cloudflare, with additional technologies such as Vue.js and Amplitude detected, which may be employed to enhance user interaction or tracking. Threat intelligence sources provide concrete evidence of malicious activity: the domain appears on one security blocklist and is flagged by one of 95 vendors in a VirusTotal scan. It is also listed in a threat intelligence pulse on a major threat-sharing platform. MX records point to mx1.hostinger.com and mx2.hostinger.com, which could be leveraged for email-based phishing campaigns. The domain's Gridinsoft trust score of 0/100 further corroborates its classification as high-risk. Defenders should treat this domain as an active phishing threat. Network-level blocking is recommended, particularly for organizations in logistics, e-commerce, or related sectors.