scotitalinvest[.]com

This domain, scotitalinvest.com, presents a confirmed brand impersonation threat targeting Scotia iTRADE, a legitimate investment platform. The site displays a fraudulent page titled 'Launch your market transactions career with direct investment | Scotia iTRADE®,' designed to deceive users into entering sensitive financial credentials or personal information under the guise of a trusted financial service provider. The infrastructure mimics official investment portals, increasing the likelihood of successful credential harvesting or malware distribution through fake login prompts or transaction forms. Analysis of the domain reveals multiple indicators of malicious intent. The domain was registered on February 21, 2026, through Hello Internet Corp, a registrar frequently associated with suspicious registrations. It resolves to the IP address 124.198.131.119, hosted by 1337 Services GmbH (AS210558) in the United States, a provider commonly linked to phishing and bulletproof hosting. Security vendors on VirusTotal flag the domain at a rate of 17 out of 95 engines, and it appears on at least one security blocklist. Notably, the domain lacks an SSL certificate, a critical red flag for any site handling sensitive user data, further confirming its illegitimate nature. Users who visited scotitalinvest.com should take immediate action to mitigate potential risks. If any credentials or financial information were entered, affected individuals should change passwords for all associated accounts, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. System scans using updated security tools are recommended to detect any malware or backdoors that may have been installed. Financial institutions should be notified if sensitive data was compromised, and users should report the domain to relevant cybersecurity organizations to aid in takedown efforts. Vigilance against follow-up phishing attempts via email or other channels is strongly advised.