com[.]fastchannelcargo[.]sa[.]com

The domain com.fastchannelcargo.sa.com was registered on 21 February 2026 and is presently taken offline. DNS resolution points to the IPv6 address 2606:4700:3035::ac43:86d7, which belongs to AS13335 Cloudflare, Inc. and resolves to a location in the United States. The site presented the page title “Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan”, a generic financial‑services heading that aligns with the declared brand impersonation of Mastercard. The SSL certificate is identified as WE1, indicating a valid TLS certificate issued for the host, but the certificate alone does not confirm legitimacy. Infrastructure analysis shows a Gridinsoft trust score of 0 / 100, reflecting an extremely low reputation.

The domain has been flagged by PhishDestroy and appears on a single security blocklist. VirusTotal scans recorded five positive detections out of ninety‑three scanners, confirming that multiple anti‑malware engines consider the host malicious. The risk level is elevated, and the threat type is classified as brand impersonation targeting Mastercard users. Defenders should immediately add the IPv6 address to network‑level deny lists and ensure that any DNS resolvers block resolution of the domain.

Existing web‑filtering solutions should be updated with the domain string and the associated page title to capture any residual traffic should the site become active again. Monitoring of Cloudflare‑hosted IP ranges for similar newly registered domains with low trust scores can help surface future impersonation attempts. Because the site is currently offline, incident response teams can focus on preventing re‑hosting and on educating users about unsolicited communications that reference Mastercard credentials. Continuous review of threat‑intel feeds for additional detections related to this host is recommended.