fixedgearcapital[.]pro

The domain fixedgearcapital.pro is currently classified as a generic phishing site. The page title “Fixed Gear Capital” is presented to visitors, suggesting a financial services front‑end. The domain was created on 18 November 2025 and remains active as of 12 July 2026. Registration records list Fewmoretaps OU d/b/a Trustname.com as the registrar, a pattern often observed in malicious infrastructure.

Network resolution points the domain to the IP address 188.114.96.3, which is hosted by CloudFlare, Inc. in Canada. The site serves content over HTTPS with a certificate issued by Google Trust Services under the WE1 leaf, indicating a valid TLS chain that can hide malicious payloads from casual inspection. HTTP response code 200 confirms that the page is reachable and returns a normal web response.

Threat intelligence sources reinforce the suspicion: AlienVault OTX has referenced the domain in eight separate pulses, and the Gridinsoft trust score is 0 / 100, the lowest possible rating. The domain appears on a single security blocklist and has been blocked by a recognized anti‑phishing list. VirusTotal scans have not yet produced detections (0 / 95), which is consistent with early‑stage campaigns that evade signature‑based scanners.

Defenders should treat fixedgearcapital.pro as a high‑confidence phishing indicator. Immediate actions include adding the domain and its resolving IP to outbound filtering rules, monitoring DNS queries for the domain, and applying URL‑based blocks in web gateways. Analysts should continue to track any new detections, especially from sandbox environments, and correlate observed traffic with the eight OTX pulses to assess potential victimization patterns.