cepcutapk[.]com[.]co

Analysis of cepcutapk.com.co indicates active brand impersonation targeting the 'across' platform, classified as a crypto scam. The domain was registered on August 11, 2025, through Dynadot LLC, with Cloudflare nameservers (bruce.ns.cloudflare.com, lady.ns.cloudflare.com) and resolves to IP 172.67.192.66 (AS13335, Cloudflare, Inc., US). The page title, 'CapCut Mod APK Download Latest Version v15.10.8 For Android 2025,' suggests an attempt to distribute modified APK files, though the exact content remains unverified. The domain currently returns an HTTP 301 redirect, which may indicate evasion tactics or staging for malicious payload delivery. Infrastructure analysis reveals low trust indicators: Gridinsoft trust score of 0/100, presence on one security blocklist, and blocking by MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious domains. No vendor detections were recorded in the most recent VirusTotal scan, though this does not confirm safety. Defenders should treat this domain as high-risk due to its association with crypto scams, brand impersonation, and use of Cloudflare to obscure hosting details. Monitoring for changes in HTTP status, IP resolution, or blocklist additions is recommended. If the domain is encountered in network logs, it should be flagged for immediate review, particularly in environments where APK downloads or crypto-related activity are prohibited.