ipo[.]capital

The domain ipo.capital is active and was registered on August 23, 2024 through NameCheap, Inc. It resolves to IP address 188.114.97.3, which is part of the Cloudflare, Inc. network (AS13335) and is geolocated in the United States. TLS is provided by a Google Trust Services certificate under the WE1 root, and HTTP requests return a 200 status code with the page title “Main Page - IPO Capital”. The domain appears on one security blocklist and is flagged by PhishDestroy. VirusTotal analysis shows that 6 of 95 security vendors have marked the domain as malicious. MX records point to Google mail servers (aspmx.l.google.com, alt1.as...). The threat is classified as a crypto‑related brand impersonation, specifically targeting the brand “across”. Infrastructure analysis indicates use of a cloud‑based CDN, obscuring the true hosting environment, and no additional page content has been disclosed, leaving the exact phishing payload uncertain. Defenders should block the domain at DNS and proxy levels, monitor for connections to the associated IP, and add the domain to threat‑intel feeds. Ongoing re‑scanning is recommended to detect any changes in detection status.