maxpresslogistics[.]com[.]transoceanx[.]com

The domain maxpresslogistics.com.transoceanx.com is a phishing site engaged in brand impersonation, specifically targeting Facebook users. It poses as a legitimate entity to deceive victims into disclosing login credentials or other sensitive information through social media scams. No crypto drainer kit was identified, and the site is currently taken offline, though it previously operated as an active threat.

Technical analysis shows maxpresslogistics.com.transoceanx.com was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Seclookup, with a Gridinsoft trust score of 0/100. It appears on one security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through OwnRegistrar, Inc. on February 21, 2026, and resolved to the IP address 213.165.249.109, hosted in the Netherlands (AS22611 InMotion Hosting, Inc.). The SSL certificate was issued by R11, and the observed page title was 'Maxpresslogistics | Logicstic Shipping Company'. Nameservers for the domain were ns1.managedns1.com and ns2.managedns1.com.

Victims of this phishing domain should immediately change any compromised Facebook passwords and enable two-factor authentication (2FA) to secure their accounts. Monitor for unauthorized activity, such as logins or messages sent from the account, and report suspicious transactions to Facebook. The domain can be reported to PhishDestroy or other anti-phishing organizations to aid in takedown efforts. If financial or personal data was exposed, consider placing a fraud alert with credit bureaus and reviewing account statements for signs of misuse.