evergreencapitaldirect[.]com

evergreencapitaldirect.com is currently flagged as a high‑risk brand‑impersonation site. The domain was registered on March 07 2025 through Web Commerce Communications Limited and remains active as of July 12 2026. Automated analysis assigns it a risk level of high, with a Scamadviser trust score of 1 / 100 and a Gridinsoft score of 0 / 100, indicating a strongly malicious posture. The domain resolves to the IPv4 address 107.173.193.235, which belongs to AS36352 operated by HostPapa and is geolocated in the United States. DNS resolution uses the authoritative nameservers ns1.ltxcloud.com and ns2.ltxcloud.com. HTTP requests receive a 302 redirect response, and the site presents no SSL certificate, leaving the connection unencrypted. The domain appears on a single security blocklist and has been blocked by PhishDestroy. Threat intelligence indicates that the site is engaged in brand impersonation, targeting the generic “across” brand space and presenting a page title of “Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan”. VirusTotal records show one out of ninety‑five security vendors flagging the domain, which aligns with the low trust scores and the observed infrastructure choices that are typical of phishing deployments. No additional evidence of payload delivery or credential harvesting has been publicly disclosed. Defenders should add the domain and its associated IP address to inbound and outbound filtering rules, enforce TLS inspection to capture the unencrypted traffic, and monitor for any redirects to credential‑collection endpoints. Continuous re‑evaluation is advised, as the lack of an SSL certificate and the presence of a 302 redirect suggest the site may serve dynamic phishing pages. Organizations should also share this indicator set with threat‑sharing platforms to improve collective detection.