mailandfrieght[.]com

This domain, mailandfrieght.com, is identified as a credential theft operation targeting users in the shipping and logistics sector. Analysis indicates the site impersonates legitimate freight and courier services, using a deceptive page title 'Mail And Fright – Shipping and Logistics' to lure victims into submitting sensitive login credentials. No evidence of cryptocurrency drainer functionality or specific brand impersonation (e.g., DHL, FedEx) was observed; however, the generic logistics theme suggests broad targeting of industry professionals and customers. Infrastructure analysis reveals the domain was registered on March 29, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, a registrar frequently associated with malicious domains. The site resolves to the IP address 198.251.84.200, which has been linked to prior phishing campaigns. Detection metrics show 4 out of 95 security vendors on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of 32 out of 100. The domain appears on one security blocklist and was actively blocked by PhishDestroy. Technologies detected include WordPress, MySQL, PHP, LiteSpeed, and multiple JavaScript libraries, indicating a structured and potentially automated attack infrastructure. As of the latest assessment, mailandfrieght.com has been taken offline, reducing immediate risk to end users. However, the domain's recent creation date and use of a Let's Encrypt SSL certificate suggest an attempt to appear legitimate. Organizations and individuals in the logistics sector should remain vigilant, as threat actors may re-deploy similar infrastructure under new domains. Users are advised to verify domain authenticity through official channels, implement multi-factor authentication, and report suspicious URLs to security teams for further analysis.