corecargologistics[.]com

The domain corecargologistics.com was registered on July 13, 2025 through Sav.com, LLC. It resolves to the IPv4 address 198.12.80.250, which is owned by AS36352 (HostPapa) and geolocated to the United States. An active Let’s Encrypt R12 certificate secures the site, and HTTP requests return a 200 status code. The page title reported by crawlers is “CORE CARGO”, indicating a possible attempt to masquerade as a logistics service, although the exact target brand cannot be confirmed from the available data.

Passive and active scans flag the domain as high‑risk. VirusTotal reports that 13 of 95 security vendors have identified malicious behavior, and the domain appears on a single public blocklist (PhishDestroy). Reputation services assign a Gridinsoft score of 0/100 and a Scamadviser trust rating of 1/100, both suggesting extreme lack of legitimacy. The web stack includes Bootstrap, LiteSpeed, SweetAlert2, OWL Carousel, jQuery, and HTTP/3, a combination frequently observed in phishing kits. The site remains active as of the reporting date.

Defenders should add corecargologistics.com to outbound filtering rules and DNS blocklists, and monitor traffic to the associated IP address 198.12.80.250 for anomalous connections. Because the site returns a valid HTTPS certificate and a standard HTTP 200 response, automated detection based solely on TLS anomalies may miss this infrastructure; heuristic or reputation‑based controls are recommended. Additional investigation is needed to capture the full payload, login endpoints, or any credential‑harvesting forms, as those elements have not been disclosed by the current intelligence.