capitalprimeplc[.]com

This domain, capitalprimeplc.com, is identified as a brand impersonation threat designed to deceive users by mimicking the legitimate Across platform. Brand impersonation phishing sites typically replicate the appearance and functionality of trusted entities to harvest credentials, financial details, or other sensitive information. In this case, the domain presents itself under the name 'capitalprimeplc,' a fabricated identity likely intended to exploit trust in the Across brand for fraudulent purposes. Such schemes often target users through deceptive emails, fake login portals, or fraudulent investment opportunities, posing significant risks of financial loss or unauthorized account access. Analysis indicates this domain exhibits multiple high-confidence indicators of malicious activity. As of the latest scan, 10 out of 95 security vendors on VirusTotal flagged capitalprimeplc.com as malicious, reflecting a consensus among detection engines regarding its fraudulent nature. The domain was registered on March 1, 2023, through Tucows Domains Inc., a registrar frequently utilized for both legitimate and malicious registrations. Infrastructure analysis reveals the domain resolved to the IP address 198.12.93.82, hosted on AS36352 (HostPapa) in the United States. The SSL certificate, issued by GoDaddy.com, is a Domain Validation (DV) type, which provides minimal identity verification and is commonly exploited in phishing operations. Additionally, the domain appears on at least one security blocklist and was proactively blocked by a specialized anti-phishing system, further corroborating its malicious classification. Users who visited capitalprimeplc.com or interacted with its content should take immediate remedial actions to mitigate potential risks. If credentials were entered on the site, reset passwords for all accounts where the same or similar login details were used, prioritizing financial and email accounts. Enable multi-factor authentication (MFA) wherever possible to add an additional layer of security. Monitor financial statements and transaction histories for unauthorized activity, and report any suspicious transactions to the relevant institution. If the site was accessed on a corporate or shared device, notify the IT or security team to conduct a thorough review for potential compromise. Users should also verify the legitimacy of any communications claiming to be from Across or related entities, as phishing campaigns often persist even after the primary domain is taken offline. For future protection, employ browser-based security tools that block known malicious domains and maintain updated endpoint security solutions to detect and prevent access to fraudulent sites.