Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
capitall-rise[.]icu
“Access Restricted”
Zusammenfassung der Beweislage
The domain capitall-rise.icu was registered on March 11, 2026 through Aceville Pte. Ltd. and is currently resolved to the IPv4 address 43.169.14.15, which geolocates to Singapore (ACE). The site presents a page titled "Access Restricted" and is classified as an Account Takeover scam. Its SSL certificate is issued by TrustAsia Technologies, Inc., and the authoritative name servers are ns1.teodns.com and ns2.teodns.com. PhishDestroy has flagged the site, and it appears on a single security blocklist.
VirusTotal analysis shows that six of ninety‑four scanning engines flagged the domain as malicious, indicating partial consensus among detection vendors. As of the report date, the site is taken offline, and no active HTTP response was observed. The limited blocklist presence and modest VirusTotal detection count suggest that the infrastructure may be in early deployment or that the campaign is short‑lived, but the combination of a recent registration, dedicated SSL certificate, and Account Takeover intent confirms malicious intent.
Defenders should immediately block the domain and the associated IP address at perimeter and DNS layers, add the nameservers to watch lists, and monitor for any resurgence of the host. Continuous re‑scanning on VirusTotal and inclusion in internal URL reputation services are advised to capture any future changes in detection status. Organizations should also consider alerting users about potential credential‑theft attempts that could reference this domain, even though the site is currently offline.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260323-F62CD8- Titel der erfassten Seite
- Access Restricted
- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 13.08.2026
Erkennungszeitleiste
-
VirusTotal
0 → 4
Community-Meldungen
Von 1 Community-Mitglied gemeldet; erstmals gesehen am 23.03.2026
- Gespeicherte Meldungen
- 1
- Eindeutige gemeldete URLs
- 1
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, TLS-Namen und Zeitstempel
SHORTDOT-ZONE · ÖFFENTLICHE BELEGE
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of capitall-rise.icu · checked Mar 23, 2026
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt