cargocraftersworldwide[.]com

The domain cargocraftersworldwide.com was a phishing site engaged in brand impersonation, specifically targeting Google. It posed an elevated risk as a scam designed to deceive users into believing they were interacting with a legitimate Google service, though no crypto drainer kit was identified. The site has since been taken offline, but its activity aligns with credential theft or fraudulent login schemes.

Technical analysis reveals that cargocraftersworldwide.com was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, which assigned it a trust score of 0/100. It appeared on one security blocklist (PhishDestroy) and was registered through Cosmotown, Inc. on May 16, 2025. The domain resolved to the IP address 192.3.141.254, hosted on AS36352 (HostPapa) in the US, with nameservers ns1.anitahost.com and ns2.anitahost.com. No SSL certificate was present, and the observed page title was 'Cargo Crafters World Wide | Homepage'. Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who may have interacted with cargocraftersworldwide.com should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand (Google) and relevant authorities, such as the FTC or local cybercrime units. If financial or crypto assets were involved, revoke any token approvals and consider transferring funds to a new wallet. Reporting the domain to platforms like PhishTank or Google Safe Browsing can help prevent further abuse.