eversteadcapitex[.]com

Analysis of the domain eversteadcapitex.com indicates active brand impersonation targeting the financial sector, specifically classified as a crypto scam. The domain was registered on August 2, 2025, through NameSilo, LLC, and remains operational as of July 12, 2026. It resolves to IP address 172.245.14.133, hosted on AS36352 (HostPapa) in the United States. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious domains. Infrastructure review shows a single nameserver configuration, which is atypical for high-availability services but frequently observed in low-cost phishing setups. The domain is flagged on one security blocklist (PhishDestroy) and has a Scamadviser trust score of 4/100, alongside a Gridinsoft trust score of 0/100, reinforcing its malicious classification. Two of 95 security vendors on VirusTotal detect this domain as malicious. The HTTP response code is 302, suggesting a redirect mechanism, though the destination remains unconfirmed. The page title, 'EverSteadCapitex - Dedicated to innovating, simplifying, and humanizing digital banking,' aligns with branding tactics used in financial scams, though the exact content and functionality of the site have not been analyzed. No evidence confirms the presence of a specific phishing kit or additional payloads. Defenders should treat this domain as high-risk, block resolution at the DNS level, and monitor for connections from internal assets. Further investigation into redirect chains and associated infrastructure is recommended.