fancourierbox.com presents itself as a potentially malicious site, focusing on courier phishing scam. This domain is a fraudulent website impersonating the Romanian courier service FAN Courier. It presents a fake package tracking interface and attempts to trick users into linking their WhatsApp accounts to the attacker's device under the guise of receiving a confirmation code.
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Historical | fancourierbox.com | 1 day ago |
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Historical | fancourierbox.com | 1 day ago |
Real experiences from people who visited this domain
URLert analyzed recent scan activity for fancourierbox.com and found 1 result.
| Status | Target URL | Time |
|---|---|---|
| Malicious | https://fancourierbox.com/?phone=*** | 3w ago |
Access this classification data programmatically via our API.
{
"domain": "fancourierbox.com",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Courier Phishing Scam"
},
"identity": {
"headline": "Phishing site impersonating FAN Courier to hijack WhatsApp accounts",
"summary": "This domain is a fraudulent website impersonating the Romanian courier service FAN Courier. It presents a fake package tracking interface and attempts to trick users into linking their WhatsApp accounts to the attacker's device under the guise of receiving a confirmation code.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"scam",
"courier impersonation",
"whatsapp hijacking"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-02-03T06:20:24Z",
"rank": null,
"hosting_provider": "CLOUDFLARENET - Cloudflare, Inc."
}
}