a1expressdc[.]com

This domain, a1expressdc.com, is actively engaged in credential harvesting phishing operations targeting logistics and shipping industry professionals. The site masquerades as a legitimate logistics provider under the name 'A1 EDC - Professional Logistics,' using a fabricated corporate identity to deceive visitors into submitting sensitive login credentials, financial details, or personal information. Analysis indicates the site is designed to exploit trust in logistics service providers, potentially leading to unauthorized access to corporate accounts, financial fraud, or further targeted phishing attacks against supply chain partners. Infrastructure analysis reveals the domain was registered through Dynadot LLC, a registrar frequently associated with phishing and malicious domain registrations. The site resolves to the IP address 162.245.237.212 and employs a Let's Encrypt SSL certificate (YR1) to present a false sense of security. As of the latest assessment, the domain is flagged by 2 out of 95 security vendors on VirusTotal, including detection by specialized phishing blocklists. The domain remains active and unmitigated, with no evidence of takedown or suspension by the registrar or hosting provider. Individuals who have visited a1expressdc.com or interacted with its content should immediately cease all engagement and take corrective actions. If credentials were entered, reset passwords for all associated accounts, particularly those linked to corporate or financial systems. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, including unauthorized transactions or login attempts. Organizations should block the domain and IP address 162.245.237.212 at the network perimeter to prevent further exposure. Report the domain to relevant security teams or incident response platforms to support broader mitigation efforts.