assignment[.]smartcapitaltrades[.]org

assignment.smartcapitaltrades.org is classified as a generic phishing site with a high risk rating. The domain was created on 21 February 2026 via Global Domain Group LLC and remains active as of 12 July 2026. No TLS certificate is presented, and the server returns HTTP 200 responses, confirming that the malicious landing page is publicly reachable.

Infrastructure analysis shows the domain resolves to IP 198.251.89.220, which geolocates to Luxembourg and is listed under FranTech Solutions. Authoritative DNS is provided by three nameservers—ns28.my-control-panel.com, ns28.asurahosting.com, and ns27.asurahosting.com. The web server identifies as LiteSpeed and is fronted by Cloudflare, delivering content over HTTP/3. Page markup reveals the use of Bootstrap, external libraries from cdnjs, and the Smartsupp live‑chat widget. The page title "CFD" aligns with common lures used in trading‑related phishing campaigns.

Reputation signals reinforce the malicious assessment. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal records six detections out of ninety‑five scanned security vendors. The domain appears on a single public blocklist and has been specifically blocked by the PhishDestroy mitigation service. Although the vendor count is modest, the convergence of low trust scoring, blocklist presence, and targeted blocking indicates a purposeful phishing operation.

Uncertainties remain regarding the specific phishing kit, credential harvesting mechanisms, and any additional sub‑domains that may share the same infrastructure. Defenders should block the domain and its associated IP at both DNS and network perimeter, enforce HTTPS‑only policies to mitigate accidental loading, and monitor the three authoritative nameservers for new hostnames. Deploying sinkhole redirects for the IP address and sharing indicators of compromise with upstream threat‑intel platforms will help contain potential expansion of the campaign.