fancourierbox.icu presents itself as a potentially malicious site, focusing on phishing impersonation. This is a fraudulent website designed to impersonate the Romanian logistics company FAN Courier. It utilizes social engineering tactics, such as fake delivery tracking and urgent notifications about 'overloaded' lockers, to trick users into linking their WhatsApp accounts to an attacker's device.
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Historical | fancourierbox.icu | 3 days ago |
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Historical | fancourierbox.icu | 3 days ago |
Real experiences from people who visited this domain
URLert analyzed recent scan activity for fancourierbox.icu
No public scans recorded recently
Be the first to run a threat analysis on this domain.
Access this classification data programmatically via our API.
{
"domain": "fancourierbox.icu",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Phishing Impersonation"
},
"identity": {
"headline": "Phishing site impersonating FAN Courier for WhatsApp account hijacking",
"summary": "This is a fraudulent website designed to impersonate the Romanian logistics company FAN Courier. It utilizes social engineering tactics, such as fake delivery tracking and urgent notifications about 'overloaded' lockers, to trick users into linking their WhatsApp accounts to an attacker's device.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"scam",
"brand impersonation",
"whatsapp hijacking",
"cybercrime"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-02-14T04:53:26Z",
"rank": null,
"hosting_provider": "CLOUDFLARENET - Cloudflare, Inc."
}
}