growthcapital-fund[.]org

This domain is flagged as a high-risk brand impersonation threat, specifically targeting the brand Across. Growthcapital-fund.org attempts to deceive users by mimicking the legitimate brand, posing significant risks of information theft or financial loss. The domain was identified as misleading, with multiple security vendors—10 out of 95, as confirmed by VirusTotal—recognizing it as a phishing threat.

Technical analysis reveals that growthcapital-fund.org resolves to the IP address 107.172.61.186, which is located in the United States and associated with AS36352 HostPapa. The domain was registered through Dynadot LLC on June 27, 2025, indicating relatively recent activity. Notably, the site does not utilize an SSL certificate, a common indicator of insecure or malicious domains. It has been flagged for phishing by Google Safe Browsing and appears on at least one security blocklist. The current status of the domain is offline, meaning it no longer poses an active threat at this time, although historical data and the brand impersonation attempt have warranted its classification as high risk.

Mitigation steps must involve consistent monitoring of domains with similar naming patterns to detect future attempts at brand impersonation. Security teams should ensure that all incoming traffic is scanned, especially for domains flagged for phishing, and implement robust email filtering to block phishing emails that may direct users to similar malicious sites. Organizations should also educate their users on recognizing signs of phishing attempts, such as unexpected requests for personal information. Regularly updating security measures in line with current threats remains essential to ensuring ongoing protection against these types of malicious activities.