Hello,
As a result of proactive measures undertaken by the National Cyber Security Directorate (DNSC), we would like to inform you that the domain [ mdrcap[.]co ] is involved in a phishing/investment fraud cybersecurity incident.
This attack appears to target and impersonate the legitimate UK company MADARA CAPITAL MANAGEMENT LTD, company number 10425704, while also misusing the identity of related Madara group entities, including Madara Invest Ltd and Madara Network Ltd, to create false credibility.
We request that you take the necessary steps to resolve this incident as soon as possible and inform us of the outcome of your activities. It is possible that the phishing page is being restricted so it is only visible from certain countries, in this case Romania.
——————– DETAILS ————————-
Domain: mdrcap[.]co
Domain Registered On: 2026-06-25
IP: 78[.]17[.]147[.]224
URLs: hxxps[://]mdrcap[.]co
Past Domain: madara-cap[.]org and madaracapital[.]co
Note: The domain appears to impersonate the legitimate UK company MADARA CAPITAL MANAGEMENT LTD, company no. 10425704. The company details are real, but this does not confirm that mdrcap[.]co is authorised.
Companies House also links the person behind this company to other Madara entities, suggesting possible misuse of a real company/group identity.
The domain mdrcap[.]co appears to be used as part of an investment fraud scheme. Victims are initially lured through the cloaked lure page hxxps[://]novazstone[.]info/ro/zeongrow/signin/#iframe-scroll, where they are presented with fake investment-related content and instructed to register. After registration, victims are redirected to hxxps[://]mdrcap[.]co/en/trading, which appears to be the fraudulent trading platform.
