specialtycapital[.]ca

Analysis of specialtycapital.ca indicates active phishing infrastructure linked to a crypto scam, first registered on July 1, 2025, through Go Daddy Domains Canada, Inc. The domain resolves to IP 216.150.1.1, hosted on Amazon.com, Inc. (AS16509) in the United States. The site presents itself under the page title 'Specialty Capital - Trusted Revenue-Based Financing Experts,' though no legitimate affiliation with such services is confirmed. Detected technologies include Google Maps, Bootstrap, Vercel, Stripe, Trustpilot, Mailgun, and HSTS enforcement, suggesting an attempt to mimic a professional financial platform. Security vendors have flagged this domain, with four out of 95 engines on VirusTotal identifying it as malicious.

It appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. The Gridinsoft trust score is 0/100, reinforcing its high-risk classification. The domain uses nameservers ns55.domaincontrol.com and ns56.domaincontrol.com, consistent with GoDaddy-managed infrastructure, and employs a GoDaddy-issued SSL certificate (Go Daddy Secure Certificate Authority - G2). The HTTP status code 308 (Permanent Redirect) may indicate attempts to reroute visitors to alternative malicious endpoints.

While the exact content and mechanics of the scam remain unconfirmed, the classification as a 'Crypto Scam' aligns with observed patterns in financial fraud. Defenders should treat this domain as hostile, block resolution at the network level, and monitor for related infrastructure using the same nameservers, hosting provider, or SSL issuer. Further investigation into associated IPs, redirect chains, and payment endpoints is recommended to disrupt the campaign.