wealthcapitalprime[.]org

wealthcapitalprime.org is currently flagged as a high‑risk generic phishing site. The domain was registered through Dynadot Inc on 19 January 2024 and resolves to the IPv4 address 66.70.148.17. Authoritative name servers listed for the zone are ns5.ddoscure.com, ns6.ddoscure.com, protected3.ddoscure.com and protected4.ddoscure.co, indicating that the infrastructure is hosted on the ddoscure.com namespace. The domain appears on a single public blocklist and is listed by the PhishDestroy sinkhole, confirming that at least one defensive feed has observed malicious activity associated with it.

VirusTotal analysis shows that 3 of 91 scanning engines have raised detections against the domain, reinforcing the phishing classification. No additional public reputation services, Safe Browsing checks, or Open Threat Exchange (OTX) entries are referenced in the available intelligence, leaving the broader community visibility limited. The HTTP response, TLS certificate details, page title, and content have not been captured, so the exact phishing lure and victim targeting remain unknown.

Defenders should block traffic to 66.70.148.17 and to the domain name itself at the DNS layer, add the domain to internal blocklists, and monitor for any outbound connections to the listed name servers. Continuous re‑scanning with multi‑engine services is advised to detect any change in the detection count, and analysts should request fresh page capture to verify the phishing vector and to enrich indicator sets such as URL patterns or credential‑stealing forms. Given the high risk rating and active status, the domain should be treated as hostile until remediation is confirmed.