freight[.]vortexpro-cargo[.]top

The domain freight.vortexpro-cargo.top was a brand-impersonation phishing site targeting users of the logistics platform 'across'. It posed as a legitimate cargo or freight service but was designed to harvest login credentials or other sensitive information through deceptive branding. No crypto drainer kit was associated with this campaign. The site is currently taken offline, but it previously exhibited elevated risk due to its impersonation tactics.

Technical indicators confirm freight.vortexpro-cargo.top as malicious. At the time of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft (trust score 0/100) and Trustwave. The domain was registered through NameSilo, LLC on July 22, 2025, and resolved to the IP address 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE) in the US. It appeared on one security blocklist (PhishDestroy) and lacked an SSL certificate. The observed page title was 'Home - VORTEXPRO-CARGO', and nameservers were dns1.lytehosting.com through dns4.lytehosting.com. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with freight.vortexpro-cargo.top should immediately change any passwords entered on the site, particularly for accounts related to 'across' or other logistics services. Enable two-factor authentication (2FA) on all affected accounts to prevent unauthorized access. Monitor financial statements and account activity for signs of fraud. Report the phishing domain to the impersonated brand's security team and to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.