cargolitetransit[.]live

The domain cargolitetransit.live was a phishing site engaged in brand impersonation targeting the logistics and financial services brand 'across'. It posed an elevated risk by mimicking legitimate business pages to harvest user credentials or sensitive information, though no crypto drainer kit was identified. As of the latest verification, cargolitetransit.live has been taken offline.

Technical indicators confirm the domain's malicious intent. VirusTotal detected cargolitetransit.live as malicious by 1 of 95 security vendors, including Gridinsoft, which assigned a trust score of 0/100. The domain was registered on July 11, 2025, through OwnRegistrar, Inc., and resolved to the IP address 176.9.7.179, hosted by Hetzner Online GmbH in Germany. It appeared on one security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. No SSL certificate was issued, and the observed page title was 'Cargolite Transit | Home'. The domain used a single nameserver.

Users who interacted with cargolitetransit.live should immediately change any credentials entered on the site, particularly if they pertain to the impersonated brand 'across'. Enable two-factor authentication (2FA) on all relevant accounts to prevent unauthorized access. Monitor financial statements and account activity for signs of fraud. Report the phishing domain to the impersonated brand's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.