fdexshipping[.]com

This domain, fdexshipping.com, is identified as a brand impersonation threat specifically targeting Facebook, a high-value platform for fraudulent activity. The site presents itself as a logistics or shipping company under the name 'Fdex Shipping | Logicstic Shipping Company,' a common tactic to lend false legitimacy to phishing or credential harvesting operations. Brand impersonation of this nature is frequently used to deceive users into divulging sensitive information, such as login credentials, payment details, or personal data, under the guise of a trusted service. The elevated risk level is justified by the domain's deliberate mimicry of Facebook’s branding, which increases the likelihood of successful social engineering attacks against unsuspecting users. Infrastructure analysis reveals multiple technical indicators supporting the classification of this domain as malicious. The domain was registered on June 03, 2025, through GMO Internet, Inc., and currently resolves to the IP address 213.165.249.109. Security vendors on VirusTotal flagged the domain, with 5 out of 95 engines detecting it as malicious. Additionally, the domain appears on one security blocklist and is actively blocked by PhishDestroy. The use of Nginx and OpenResty as detected technologies further suggests an attempt to obfuscate or scale malicious operations, as these are commonly employed in both legitimate and fraudulent web infrastructures. The Gridinsoft trust score of 0/100 and Scamadviser trust score of 26/100 provide further quantitative evidence of its suspicious nature. Users who have visited fdexshipping.com or interacted with its content should take immediate remedial actions to mitigate potential risks. First, any credentials or personal information entered on the site should be considered compromised and changed immediately across all platforms where the same credentials may have been reused. It is recommended to monitor financial accounts and credit reports for unauthorized activity, as stolen data may be exploited for identity theft or fraud. If the site was accessed via a corporate or institutional network, IT security teams should be notified to assess potential exposure. Finally, users should ensure their devices are scanned for malware, as interactions with malicious domains can sometimes lead to secondary infections or data exfiltration.