expedite-courierservices[.]us

This domain, expedite-courierservices.us, is currently under investigation for brand impersonation targeting Across, a recognized courier and logistics provider. The site presents itself as a legitimate delivery and transportation service, using the page title 'Expedite Courier Services Logistic, Delivery and Transportation,' which aligns with common tactics used in fraudulent schemes to deceive users into engaging with malicious infrastructure. Analysis indicates the domain remains active and operational, increasing the urgency for further scrutiny. Infrastructure analysis reveals several concerning indicators. The domain resolves to the IP address 163.61.188.89, hosted under AS153568 (NEW DHAKA HARDWARE) in the United States. It was registered on October 16, 2024, through OwnRegistrar, Inc., a registrar often associated with high-risk domains. Despite its recent creation, the domain has already been flagged on one security blocklist, though it remains undetected by VirusTotal, with 0 out of 95 vendors marking it as malicious. Notably, the absence of an SSL certificate further undermines its credibility, as modern legitimate services typically enforce encrypted connections. Current evidence suggests this domain is actively being used to facilitate brand impersonation, likely for fraudulent activities such as phishing, credential harvesting, or unauthorized transaction processing. Organizations and end-users are advised to treat this domain with extreme caution. Immediate actions should include blocking the domain and its associated IP (163.61.188.89) at the network level, monitoring for any attempts to interact with it, and reporting the domain to relevant threat intelligence platforms for broader awareness. Given its recent registration and lack of detection by major security vendors, continuous monitoring for emerging threats linked to this infrastructure is recommended.