vakiflerxcapital[.]com

Analysis of vakiflerxcapital.com confirms an active phishing domain targeting financial services, first registered on March 10, 2026. The site's page title, 'Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan,' directly suggests an attempt to mimic a legitimate banking portal, though the specific financial institution being impersonated remains unconfirmed. Infrastructure analysis reveals the domain resolves to IP address 198.251.84.200 and was registered through Hosting Concepts B.V. d/b/a Registrar.eu. Detected technologies include LiteSpeed, Typekit, Modernizr, jQuery, and HTTP/3, which are consistent with modern web applications but do not inherently indicate malicious activity. The domain appears in 24 threat intelligence pulses on AlienVault OTX and is flagged by 16 of 95 security vendors in aggregated scans. It is currently listed on two security blocklists, including PhishDestroy and BLP-Malware, and holds a trust score of 0/100. As of July 12, 2026, the site remains active, with no evidence of takedown or mitigation. Defenders should treat this domain as high-risk and prioritize blocking at the network and endpoint levels. Further investigation into the hosting infrastructure and associated campaigns is recommended to identify potential links to broader phishing operations. The absence of confirmed brand impersonation beyond the page title limits attribution, but the technical indicators align with known banking phishing tactics.