fedcargogroup[.]live

The domain fedcargogroup.live was a phishing site engaged in brand impersonation, specifically targeting the logistics and shipping brand 'across'. This site posed an elevated risk by presenting itself as a legitimate shipping and tracking platform to deceive users into entering sensitive information. No crypto drainer kit was associated with this campaign. As of the latest verification, fedcargogroup.live has been taken offline.

Technical analysis of fedcargogroup.live revealed limited but notable detection. 2 of 95 VirusTotal security vendors flagged the domain, including CRDF and Gridinsoft, which assigned a trust score of 0/100. The domain appeared on 1 security blocklist, PhishDestroy, while Google Safe Browsing did not flag it. It was registered through MIT (ASN: 153568), though the creation date was not available. The site resolved to the IP address 163.61.188.89, located in the US under AS153568 (NEW DHAKA HARDWARE), and used nameservers vip1.cupisweb.com and vip2.cupisweb.com. No SSL certificate was present, and the observed page title was 'Fedcargogroup - Ship, manage, track, deliver'.

Users who interacted with fedcargogroup.live should take immediate steps to secure their accounts. If login credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand, 'across'. Additionally, victims may report the phishing domain to their email provider, browser vendor, or platforms like Google Safe Browsing and PhishTank to aid in broader mitigation efforts.