cargoshift-expres[.]us

The domain cargoshift-expres.us is a phishing site that impersonates the brand across, posing a significant risk as a shipping scam. The site has been flagged by 3 of 95 security vendors on VirusTotal, including CRDF, Fortinet, and Gridinsoft, and it appears on 1 security blocklist, specifically PhishDestroy. The domain is currently taken offline, but it remains a point of concern due to its elevated risk level and the potential for credential theft.

Technical indicators for cargoshift-expres.us include its registration through Global Domain Group LLC on August 20, 2025, and its resolution to the IP address 163.61.188.92, which is located in the US under the AS153568 NEW DHAKA HARDWARE network. The domain has a Gridinsoft trust score of 0/100, indicating a very low level of trust. It is not protected by an SSL certificate, which is a red flag for users as it suggests the site is not secure. The nameservers for the domain are dns1.cupisweb.com and dns2.cupisweb.com.

To protect against the risks associated with cargoshift-expres.us, users should change their passwords and enable two-factor authentication if they have entered credentials on this site. They should also monitor their accounts for any signs of unauthorized activity or fraud. If users suspect they have been targeted by this phishing scam, they can report the incident to their respective brand or organization and to the authorities. Additionally, reporting the domain to platforms like PhishTank or the Anti-Phishing Working Group can help prevent others from falling victim to this brand impersonation scam.