atlanticcargoxpress[.]com[.]goldentrustfundz[.]com

This domain, atlanticcargoxpress.com.goldentrustfundz.com, was registered through Dynadot Inc on 2026-02-21 and remains active. DNS resolution points to IP address 198.12.80.250, which belongs to AS36352 hosted by HostPapa in the United States. The domain serves HTTP content with a 200 response code and presents an SSL certificate rated R10, indicating a low trust score. The public page title returned is “Atlantic Cargo Express – Atlantic Cargo Express”, suggesting an attempt to impersonate a logistics service, although the exact content has not been examined.

VirusTotal analysis shows nine of ninety-three scanning engines flag the domain as malicious, and the domain appears on a single security blocklist. PhishDestroy has explicitly blocked the host, confirming its classification as a phishing site. Nameservers 5014.ns1.abovedomains.com and 5014.ns2.abovedomains.com resolve the domain, consistent with the registrar’s infrastructure. The high-risk rating assigned to the domain reflects the combination of early creation date, active hosting, malicious detections, and blocklist presence.

Uncertainty remains regarding the full payload delivered to victims, the specific phishing kit employed, and any associated command-and-control infrastructure, as no additional telemetry such as OTX tags or Safe Browsing entries were observed. Defenders should add atlanticcargoxpress.com.goldentrustfundz.com to web-filter deny lists, monitor outbound DNS queries for the listed nameservers, and consider sinkholing the IP address 198.12.80.250 to disrupt potential traffic. Continuous re-scanning with VirusTotal and periodic checks of blocklist status are recommended to capture any changes in the domain’s behavior.