celacampaig[.]wpenginepowered[.]com

The domain celacampaig.wpenginepowered.com is identified as a brand impersonation phishing site, currently marked as offline. This domain specifically targets the brand 'across,' mimicking corporate responsibility-themed content to deceive visitors into divulging sensitive information or engaging with malicious payloads. The page title 'Corporate Responsibility' aligns with tactics used to exploit trust in corporate social responsibility narratives, a common vector for credential harvesting and malware distribution. Analysis of the domain reveals multiple technical indicators of malicious activity. It was flagged by 22 of 95 security vendors on VirusTotal, indicating broad consensus on its phishing classification. The domain was registered on May 22, 2020, through MarkMonitor, Inc., a registrar frequently associated with both legitimate and malicious domains. Infrastructure analysis shows it resolves to the IP address 141.193.213.10, hosted under AS209242 (Cloudflare London, LLC), a network often leveraged for bulletproof hosting. The domain appears on one security blocklist, and its SSL certificate, issued by Let's Encrypt (serial number E8), does not mitigate its malicious intent. The creation date and persistent detection by security vendors suggest prolonged abuse. As of the latest assessment, celacampaig.wpenginepowered.com has been taken offline, reducing immediate risk to end users. However, the domain's history and infrastructure warrant continued monitoring. Organizations are advised to block the domain and its associated IP address (141.193.213.10) at the network perimeter. Security teams should review logs for prior interactions with the domain and conduct phishing awareness training emphasizing the risks of brand impersonation, particularly in corporate responsibility-themed communications. If the domain reactivates, immediate reporting to security vendors and domain registrars is recommended to expedite takedown efforts.