starcargoxpress[.]com

This domain, starcargoxpress.com, is currently active and has been classified as a high‑risk brand‑impersonation crypto scam. The site resolves to the IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc., placing the infrastructure in the United States. DNS resolution uses the Cloudflare nameservers kay.ns.cloudflare.com and stan.ns.cloudflare.com, and the TLS certificate is issued by Google Trust Services under the WE1 profile, indicating a valid HTTPS endpoint. VirusTotal records show that one out of ninety‑five scanned security vendors flagged the domain, and it appears on a single external blocklist; PhishDestroy has also listed it as blocked. The page title “Starcargo Express – delivery with precise logistics for every shipment.” matches the claimed brand, and the intelligence tags the scam as a crypto‑related impersonation targeting “across” brands. Registration data indicates the domain was created on 03 June 2025 through Hosting Concepts B.V. d/b/a Registrar.eu, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting extreme suspicion. HTTP requests return a 200 status, confirming that the site is serving content. At present, no additional indicators such as malware payloads or credential‑stealing forms have been observed, so the full attack vector remains unclear. Defenders should block the domain at network perimeter, add it to URL filtering policies, monitor outbound connections to the associated IP, and continue to collect content snapshots for further forensic analysis.