cupidconnectors[.]com

Analysis indicates that cupidconnectors.com is an active brand-impersonation domain targeting the Across protocol, classified as a high-risk crypto scam. The domain was registered on November 7, 2025, through Network Solutions, LLC, and currently resolves to IP 64.29.17.65, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. Cloudflare nameservers (george.ns.cloudflare.com and lindsey.ns.cloudflare.com) are in use, and the site presents an HTTP 307 redirect status. The page title, 'Cupid Connectors - Matchmaking CRM,' does not directly reference cryptocurrency, but the scam type is explicitly labeled as a crypto scam in available intelligence, with Across identified as the impersonated brand. Technologies detected on the domain include Node.js, React, Vercel, Next.js, HSTS, and Webpack, suggesting a modern web stack likely designed to appear legitimate. The SSL certificate is issued by Let's Encrypt (R13), and the domain has a Gridinsoft trust score of 0/100. At least one security blocklist has flagged the domain, and three vendors—MetaMask, PhishDestroy, and SEAL—have implemented blocks. VirusTotal reports 4 of 95 security vendors detecting the domain as malicious, though this sample size does not provide conclusive evidence of widespread detection. Defenders should treat this domain as actively malicious. The combination of brand impersonation, crypto scam classification, and low trust scores warrants immediate blocking at the network and endpoint levels. Further investigation into associated infrastructure, such as IP 64.29.17.65 and Cloudflare nameservers, may reveal additional related domains. Given the use of Cloudflare, defenders should monitor for changes in resolution or hosting patterns that could indicate evasion attempts. The domain's registration age (8 months) and continued activity suggest it remains part of an ongoing campaign.