fancourierbox.top presents itself as a potentially malicious site, focusing on phishing impersonation. This website is a fraudulent portal designed to look like the official FAN Courier tracking page. It attempts to hijack users' WhatsApp accounts by tricking them into using the 'Linked Devices' feature under the guise of receiving a delivery confirmation code.
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Historical | fancourierbox.top | Today |
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Historical | fancourierbox.top | Today |
Real experiences from people who visited this domain
URLert analyzed recent scan activity for fancourierbox.top and found 1 result.
| Status | Target URL | Time |
|---|---|---|
| Malicious | https://fancourierbox.top/?phone=*** | 1w ago |
Access this classification data programmatically via our API.
{
"domain": "fancourierbox.top",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Phishing Impersonation"
},
"identity": {
"headline": "Phishing site impersonating FAN Courier logistics service",
"summary": "This website is a fraudulent portal designed to look like the official FAN Courier tracking page. It attempts to hijack users' WhatsApp accounts by tricking them into using the 'Linked Devices' feature under the guise of receiving a delivery confirmation code.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"scam",
"logistics",
"fan courier",
"whatsapp hijacking",
"cybersecurity",
"fraud",
"romania"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-02-14T04:53:26Z",
"rank": null,
"hosting_provider": "CLOUDFLARENET - Cloudflare, Inc."
}
}