tropicalexpress[.]online

The domain tropicalexpress.online is a phishing site engaged in brand impersonation, specifically targeting the brand 'across'. It poses an elevated risk by attempting to deceive users into believing they are interacting with a legitimate service, potentially leading to credential theft or financial fraud. As of the latest verification, tropicalexpress.online has been taken offline, though prior activity classified it as a scam.

Technical indicators confirm the malicious nature of tropicalexpress.online. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Seclookup, and appears on 1 security blocklist (PhishDestroy). It was registered on January 23, 2025, through NameSilo, LLC, and resolves to the IPv6 address 2a02:4780:b:1038:0:74b:184f:10, hosted by AS47583 (Hostinger International Limited). No SSL certificate was issued, and the observed page title was 'Tropical Express | Home'. The domain uses nameservers ns1.dns-parking.com and ns2.dns-parking.com, and currently returns an HTTP 429 status code.

Users who interacted with tropicalexpress.online should take immediate safety steps. If credentials were entered, change passwords for the impersonated service ('across') and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspected fraud to the legitimate brand. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's security team. Victims should also consider notifying their local cybercrime unit or consumer protection agency.