fxalogistics[.]com

This domain, fxalogistics.com, was observed to host a credential‑phishing page that impersonates the logistics brand “FXA Logistics”. The page title retrieved from the site reads “FXA Logistics – Your Trusted Cargo shipping Company Number delivery company”, indicating an attempt to masquerade as a legitimate cargo‑shipping service. The domain was registered on 26 August 2022 through the registrar 1API GmbH and resolves to the IP address 172.245.14.131, which belongs to AS36352 (HostPapa) located in the United States. No TLS certificate was presented, and the site is currently offline, which may indicate takedown or a temporary suspension. Threat intelligence shows that eight of ninety‑five antivirus engines on VirusTotal flagged the domain, and it appears on a single public blocklist.

Reputation services assign extremely low trust scores: ScamAdviser rates the site 1 / 100 and Gridinsoft rates it 0 / 100. The domain is also listed by PhishDestroy as a blocked entry. The only listed nameserver count is one, but the specific nameserver hostnames were not disclosed. Defenders should treat any traffic to fxalogistics.com as malicious. The lack of SSL, combined with the low reputation scores and multiple vendor detections, suggests a high likelihood of credential harvesting.

Network controls should be updated to block the IP 172.245.14.131 and the domain itself at DNS and proxy layers. Email filters should be tuned to detect references to “FXA Logistics” or the phrase “Your Trusted Cargo shipping Company” that could be used in lure content. Continuous monitoring of the registrar 1API GmbH for new domains that resolve to the same hosting provider is recommended, as threat actors often reuse the same infrastructure. Because the site is offline, active verification is not possible, and analysts should corroborate this assessment with any future re‑hosting events.