cargoswiftlogistic[.]com

cargoswiftlogistic.com was observed delivering a full HTML page with HTTP status 200 on 2026-07-12. The site presents a fabricated landing page titled "Welcome to Cargo Swift Logistic – Premium Global Shipping Solutions," a clear attempt to masquerade as a legitimate logistics provider. The threat is classified as generic_phishing with a high risk rating and remains active at the time of analysis. Infrastructure analysis shows the domain resolves to the IPv4 address 163.61.188.5, which is geolocated to the United States (MIT). The hosting server advertises a Let’s Encrypt certificate (R12) and employs LiteSpeed web server with HTTP/3 support. The site is built with PHP, Tailwind CSS, Alpine.js and loads external libraries from Unpkg, jsDelivr and Smartsupp, indicating a typical low‑cost phishing kit. Authoritative nameservers are dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com and dns4.lytehosting.com, and the domain was registered on April 15, 2026 through Spaceship, Inc. Reputation data corroborates the malicious intent. VirusTotal reports that 2 of 95 security vendors flag the domain, and Gridinsoft assigns a trust score of 16 out of 100. The domain appears on one security blocklist and has been recorded in a single AlienVault OTX pulse. PhishDestroy has already blocked the site, confirming active mitigation by at least one anti‑phishing service. Defenders should add 163.61.188.5 and the domain cargoswiftlogistic.com to block lists at perimeter and endpoint solutions. Continuous monitoring of the associated nameservers and the registration holder Spaceship, Inc. is advised to detect any replication of the infrastructure. Users receiving unsolicited communications that reference Cargo Swift Logistic should be warned to verify the sender through trusted channels, as the current page is a high‑risk impersonation vector.