aritoracapital[.]com

Analysis of aritoracapital.com shows an active infrastructure consistent with a high‑risk brand‑impersonation campaign targeting the "across" brand. The domain was registered on August 13 2025 through Hostinger operations, UAB, and uses the default parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to IP 147.93.73.70, which is owned by AS47583 Hostinger International Limited and is geolocated in Lithuania. The site serves content over HTTPS with a Let’s Encrypt R12 certificate and returns HTTP 200 on requests. Reputation signals include a Gridinsoft trust score of 0 / 100, presence on a single security blocklist, and a block listing by PhishDestroy. VirusTotal scans have flagged the domain by 2 of 95 security vendors. The page title "Aritora Capital" and the classification as a "Crypto Scam" suggest the site is being used to lure victims into a cryptocurrency‑related fraud while masquerading as a legitimate entity. Concrete evidence of the phishing page’s content is not available, so the exact visual or functional tactics remain unknown. Defenders should treat the domain as malicious, add it to network and email blocklists, monitor for any related C2 activity, and consider sinkholing the IP address to disrupt traffic. Ongoing observation is recommended to capture any future payloads or credential‑harvesting mechanisms that may be deployed.