equitycapitalmarket[.]co

The domain equitycapitalmarket.co was registered on 21 February 2026 through the registrar Sav.com LLC. DNS resolution points to the IPv4 address 185.255.122.10, which is allocated to Virtual Systems LLC in Ukraine (AS30860). The site presents a TLS certificate issued by Let’s Encrypt (R12) and serves HTTP responses with a 302 redirect, indicating an attempt to forward visitors to another location. The page title retrieved from the host reads “Crypto and Stock Trading with Equity Capital Market”, suggesting an investment‑oriented lure. Technology fingerprinting identifies the use of Smartsupp live‑chat widget, OWL Carousel, jQuery UI, jQuery, and support for HTTP/3, all of which are common in low‑cost website deployments. Reputation services flag the domain as extremely high risk.

Scamadviser assigns a trust score of 1 out of 100, Gridinsoft also reports a score of 1 out of 100, and the domain appears on a known phishing blocklist maintained by PhishDestroy. VirusTotal analysis shows that five of ninety‑three scanning engines have flagged the site, reinforcing the malicious assessment. AlienVault OTX lists the address in one threat‑intel pulse, and the domain is present on an additional security blocklist. The MX record is self‑referential (priority 0, host equitycapitalmarket.co), a pattern often used by phishing operators to control email flow. The evidence collectively points to a classic generic phishing operation that likely harvests credentials or financial information by masquerading as a legitimate crypto or stock trading service.

However, the exact payload, phishing landing pages, and victim interaction flow have not been publicly disclosed, leaving the precise modus operandi uncertain. Defenders should block both the domain and its resolving IP at perimeter defenses, monitor DNS queries for the associated nameservers (mars1.freednsdedi.com, mars2.freednsdedi.com), and add the IP to threat‑intel feeds.