capitals-trade[.]com

This domain, capitals-trade.com, is confirmed as a brand impersonation scam targeting Across, as indicated by multiple threat intelligence sources and infrastructure analysis. Registered on July 8, 2025, through HOSTINGER operations, UAB, the domain resolved to IP 82.25.102.183, hosted on AS47583 (Hostinger International Limited) in Germany. The domain was flagged by one security blocklist (PhishDestroy) and appears in a single AlienVault OTX threat intelligence pulse, reinforcing its malicious classification. Gridinsoft and Scamadviser both assigned trust scores of 0/100 and 1/100, respectively, categorizing it as a brand impersonation scam.

The page title, 'Home - capitals-trade,' suggests an attempt to mimic a legitimate platform, though no SSL certificate was present, and the domain currently resolves to an offline status. Infrastructure analysis reveals the use of nameservers ns1.dns-parking.com and ns2.dns-parking.com, a common indicator of low-cost or disposable hosting setups. While VirusTotal shows one detection out of 95 vendors, this limited visibility does not diminish the domain's confirmed malicious status.

Defenders should treat this domain as a high-confidence threat, particularly for Across-related phishing campaigns. Recommended actions include blocking the domain and its associated IP at the network level, monitoring for related infrastructure (e.g., subdomains or newly registered lookalike domains), and alerting users to potential brand impersonation risks. Given the domain's offline status, further forensic analysis may be limited, but historical logs should be reviewed for any prior connections or interactions.