immediatemomentumappai[.]com

Analysis of immediatemomentumappai.com indicates a brand impersonation campaign targeting Across, a known decentralized finance platform. The domain was registered on April 29, 2025, through MainReg INC and currently resolves to IP 91.236.116.114, hosted by AS42237 (w1n ltd) in Sweden. No SSL certificate is present, increasing the risk of unencrypted data interception. The page title, 'Immediate Momentum ™ | The Official Site 【UPDATED 2025】,' explicitly claims official status, a common tactic in brand impersonation schemes. Infrastructure analysis reveals the domain uses nameservers ns1.ns8t7.com and ns2.ns8t7.com, which have been associated with other malicious domains in prior threat intelligence reports.

Detection data shows the domain is flagged by 18 of 95 security vendors on VirusTotal, though this does not constitute exhaustive validation. It appears on one security blocklist (PhishDestroy) and is referenced in one AlienVault OTX threat intelligence pulse, confirming its inclusion in active threat feeds. Gridinsoft assigns a trust score of 0/100, further supporting its classification as high-risk. As of the report date, the domain is offline, but historical DNS records confirm prior resolution to the aforementioned IP.

Defenders should treat this domain as malicious and prioritize blocking it at the DNS and network levels. Given the lack of SSL and the use of hosting infrastructure linked to prior abuse, any prior interaction with this domain should be investigated for credential theft or financial fraud. The registration details and nameserver patterns may assist in identifying related domains in future campaigns. No evidence of a specific phishing kit or payload is currently available, but the brand impersonation classification aligns with known Across-related scams.