newamplify-financial-capital[.]com

This domain, newamplify-financial-capital.com, is flagged as an active financial phishing threat with high-risk indicators. Registered on October 9, 2025, through a domain registrar, it resolves to the IP address 198.49.23.144 and is currently operational, displaying only a 'Coming Soon' page title. Despite the lack of visible malicious content, the domain appears in 23 threat intelligence pulses and is listed on two security blocklists, including PhishDestroy and BLP-Malware. Analysis indicates a Gridinsoft trust score of 0/100, reinforcing its classification as malicious infrastructure. Infrastructure analysis reveals the use of Nginx, Google Cloud, OpenResty, and HubSpot technologies, alongside HTTP/3 and HSTS implementation. The SSL certificate is issued by Google Trust Services, which may lend a superficial appearance of legitimacy but does not mitigate the domain's association with phishing activity. While three out of 95 security vendors on VirusTotal flag the domain, the exact nature of the intended scam—whether targeting financial credentials, investment fraud, or another scheme—remains unconfirmed due to the absence of active malicious content at the time of assessment. Defenders should treat this domain as a confirmed phishing threat based on its inclusion in multiple threat intelligence sources and blocklists. The domain's registration details, combined with its technical infrastructure, suggest it is part of a broader campaign likely targeting financial or corporate entities. Network-level blocking of the domain and its resolving IP (198.49.23.144) is recommended to prevent potential exposure. Monitoring for changes in page content or additional indicators of compromise is advised, as the domain may transition from a dormant state to active exploitation. No specific brand impersonation has been confirmed, but the domain name implies a focus on financial services or capital-related fraud.