acl-freightflow.top

This domain, acl-freightflow.top, is under investigation for credential phishing targeting logistics and freight sectors. Registered on May 23, 2026, through Cosmotown, the domain currently resolves to the IP address 185.66.143.35. While passive DNS and infrastructure analysis reveal no immediate redirection chains or known malicious subdomains, the domain has been flagged in two threat intelligence pulses on AlienVault OTX, suggesting prior association with phishing campaigns. The SSL certificate issued by Let's Encrypt is standard for both legitimate and malicious sites, offering no conclusive evidence of intent. Analysis indicates the domain name mimics legitimate freight and logistics services, a common tactic in credential harvesting schemes. The lack of detections on VirusTotal (0/95) does not confirm safety, as phishing domains often evade initial detection during the early stages of deployment. The domain remains active, and its infrastructure warrants further monitoring for signs of malicious activity, such as newly created subdomains or changes in hosting patterns. Defenders should prioritize monitoring for connections to this domain from internal networks, particularly in logistics or supply chain environments. Network-level blocking or alerting on DNS requests to acl-freightflow.top is recommended until further analysis confirms its legitimacy or malicious intent. If additional indicators emerge, such as phishing kits or confirmed victim reports, the risk assessment should be updated accordingly. At this stage, no definitive attribution to a specific threat actor or campaign has been established.