quadshipxpress[.]com

This domain, quadshipxpress.com, is flagged for brand impersonation activity targeting Across, a recognized logistics and transportation entity. Analysis indicates the site mimics legitimate shipping and transportation services, as evidenced by its page title, 'Quadshipxpress | Shipping and Transportation service,' and the use of industry-standard web technologies. No crypto drainer or credential-harvesting scripts have been identified at this stage, but the domain’s infrastructure and branding align with known impersonation tactics designed to deceive corporate clients or partners seeking logistics services.

Technical indicators reveal the domain was registered on June 18, 2025, through GMO Internet, Inc., and resolves to the IP address 213.165.249.109. VirusTotal reports 0 detections out of 95 engines, suggesting the domain has not yet been widely flagged by automated scanning tools. However, it appears on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft. The domain’s hosting infrastructure includes Apache HTTP Server, Bootstrap, jQuery, and other common libraries, which are frequently leveraged in both legitimate and malicious sites to create a professional appearance.

As of the latest assessment, quadshipxpress.com has been taken offline, likely in response to initial detection by security systems. While the domain is no longer active, the registration remains valid, and the infrastructure could be repurposed for future campaigns. Organizations are advised to monitor for re-emergence of this domain or similar variants, particularly those impersonating logistics or shipping brands. Network defenders should update blocklists to include the domain and its associated IP, and conduct retrospective analysis to identify any prior interactions with the domain within their environments. Given the domain’s recent creation and limited detection history, continued vigilance is recommended.