investfundzonline[.]com[.]capitaltrustinvest[.]com

P1: Analysis indicates investfundzonline.com.capitaltrustinvest.com is an active brand impersonation infrastructure targeting the 'across' brand context, presenting itself as "InvestFundzOnline | The Best Crypto Solutions with Secure Digital Asset Management." The domain exhibits characteristics consistent with credential theft and potential financial account compromise attempts, leveraging crypto-related trust signals to mislead users.

P2: Known indicators show the domain resolves to IP address 107.173.193.235 located in the US (AS36352 HostPapa). The domain was created on July 08, 2025 and is registered through Web Commerce Communications Limited. Security telemetry reports 1/95 VirusTotal vendors flagging the domain, and it appears on 1 security blocklist with active blocking by PhishDestroy. No SSL certificate is present, increasing interception and tampering risk during data transmission.

P3: The domain remains active, indicating potential ongoing malicious campaign infrastructure. Users who interacted with the page should assume any submitted credentials or financial data may be compromised and should immediately change related passwords and secure associated accounts. Organizations should block IP 107.173.193.235, monitor DNS resolutions for the domain, and review authentication logs for suspicious access patterns. Continued monitoring is recommended due to weak but present detection signals combined with explicit brand impersonation and lack of transport security.