useamplify-financial-capital[.]com

Analysis of the domain useamplify-financial-capital.com indicates it is an active phishing threat targeting financial services. The domain was registered on October 9, 2025, through GRANSY S.R.O D/B/A SUBREG.CZ and currently resolves to the IP address 198.49.23.145. Infrastructure analysis reveals the use of Nginx, OpenResty, and Google Cloud technologies, alongside HSTS and HTTP/3 protocols, suggesting an attempt to appear legitimate while maintaining operational security. The SSL certificate is issued by Google Trust Services, a common tactic to evade browser security warnings. Detection data shows the domain is flagged by two security blocklists and appears in 24 threat intelligence pulses on AlienVault OTX. Three of 95 security vendors on VirusTotal classify this domain as malicious, though the exact nature of the threat remains unverified due to the 'Coming Soon' page title, which provides no further context. The Gridinsoft trust score of 0/100 further corroborates its high-risk classification. Defenders should treat this domain as an active phishing threat, particularly given its financial-themed naming convention. Network-level blocking is recommended, along with monitoring for any shifts in page content or additional infrastructure changes. The domain’s registration age (less than a year) and lack of legitimate historical use reinforce its suspicious status. No specific brand impersonation can be confirmed at this time, but the financial sector remains the likely target.