acecapitalpro[.]com

acecapitalpro.com was registered on August 18, 2025 through Global Domain Group LLC. The domain resolves to IP 198.251.83.106, which is owned by AS53667 FranTech Solutions and is geolocated in the United States. The site presents a valid TLS certificate issued by Let’s Encrypt (R13). The page title returned by the server is “AceCapital Pro”, and the intelligence tags the site as a tech support scam that impersonates Google. The threat type is identified as brand impersonation with a high risk rating, indicating that the operator likely intends to lure victims by feigning official Google support. Infrastructure clues include four authoritative name servers—ns25.asurahosting.com, ns25.my-control-panel.com, ns26.asurahosting.com, and ns26.my-co—suggesting use of a shared hosting environment. The MX record points to the domain itself with priority 0, a pattern often seen in malicious services. VirusTotal analysis shows five out of ninety‑five scanners flag the domain, and Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The domain is listed on one public blocklist and is already blocked by PhishDestroy. While the HTTP response code is 500, the actual page content has not been publicly examined, so the precise tactics (e.g., credential harvesting forms or malicious downloads) remain unknown. No additional indicators such as malicious payload hashes or command‑and‑control endpoints have been disclosed, leaving the full attack chain uncertain. Defenders should proactively deny any network traffic to acecapitalpro.com, add the domain to DNS and URL filtering policies, and monitor the associated IP address for outbound connections. Continuous re‑scanning with multi‑engine services is advisable to capture any changes in the detection rate. Organizations should also educate users about unsolicited Google support calls, as the brand impersonation suggests social‑engineering outreach.