cap-reg[.]xyz

The domain cap-reg.xyz has been identified as a generic phishing domain and is currently active. No specific brand impersonation has been confirmed. This domain poses a high risk and requires immediate attention.

Analysis indicates that cap-reg.xyz has been flagged by 6 of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain was created on June 17, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 172.67.176.107, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain is protected by an SSL certificate issued by Google Trust Services / WE1. Additionally, cap-reg.xyz appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, further indicating its malicious nature.

Given the current active status of the domain, it is recommended that all network administrators and security teams block access to cap-reg.xyz to prevent potential phishing attacks. Users should avoid clicking on any links or entering personal information on this domain. Regular monitoring of network traffic and user activity is advised to detect and respond to any attempts to access this domain. Furthermore, conducting a thorough security assessment of any systems that may have interacted with this domain is recommended to ensure that no sensitive data has been compromised.