app[.]trustora-capital[.]com

This domain, app.trustora-capital.com, has been identified as a high-risk brand impersonation campaign. The domain was registered on December 01, 2025, and is currently active as of the report date, July 24, 2026. The domain impersonates the brand 'base' and is flagged for brand impersonation, indicating a potential attempt to deceive users into believing they are interacting with a legitimate service or company. The domain is registered through Dynadot LLC and resolves to the IP address 198.23.193.170, which is located in the United States and is part of the AS36352 HostPapa network. The nameservers for this domain are dns1.geebytesdns.com and dns2.geebytesdns.com, suggesting the use of a less reputable DNS provider.

The SSL certificate is issued by Let's Encrypt, a widely trusted certificate authority, which may lend a false sense of security to users. The page title is 'Trustora-capital - Home', but the exact content of the webpage has not been fully analyzed. Infrastructure analysis reveals the use of several technologies, including particles.js, Google Maps, Bootstrap, LiteSpeed, OWL Carousel, jQuery, and DataTables, which are common in modern web development and may be used to create a convincing and functional phishing site. The domain appears on one security blocklist, and Gridinsoft has assigned it a trust score of 0 out of 100, indicating a high level of risk.

The HTTP status code is 301, suggesting that the domain may be redirecting to another location, potentially to further obfuscate the phishing activity. The domain is blocked by PhishDestroy, a known security solution. Defenders should be cautious and monitor this domain for any suspicious activity, as it poses a significant risk of brand impersonation and potential financial or personal data theft. Immediate action, such as blocking the domain and educating users about the risks, is recommended.