# capitalpro-app.digital — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/capitalpro-app.digital/ Machine-readable companion: https://phishdestroy.io/domain/capitalpro-app.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 01:03:15 UTC - Last availability or vendor check: 2026-11-01 02:53:51 UTC - Stored record updated: 2026-11-01 07:21:12 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): celer ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: NETIM SAS - Registration date (registry RDAP, capitalpro-app.digital): 2026-09-06 09:56:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16b6f-3808-719a-92bf-47493d05d29e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/capitalpro-app.digital - Certificate Transparency search: https://crt.sh/?q=%25.capitalpro-app.digital - Web Archive lookup: https://web.archive.org/web/*/https://capitalpro-app.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for capitalpro-app.digital. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for capitalpro-app.digital. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 6a5da98812a5f7d51a4eda9282182e43161f6eed8594d150d76312b203f1a7d9 Source facts (timestamps as stored): {"record_id":1645755,"first_recorded_at":"2026-10-24 03:03:15","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":16,"denominator":92,"malicious":13,"suspicious":3,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","LevelBlue":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-16T20:29:00Z","checked_at":"2026-10-25 10:52:14","fetched_at":"2026-10-25T09:51:58Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":16,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","LevelBlue","Lionic","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-10-16 20:29:00","checked_at":"2026-10-25 10:52:14","fetched_at":"2026-10-25 09:52:15","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 12:00:49"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-24 04:30:16"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 03:53:51"}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16b6f-3808-719a-92bf-47493d05d29e.png Captured: 2026-10-24 01:05:34 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0aed4-9d0f-744b-9e0e-8acf376e72ff.png Captured: 2026-10-24 01:03:15 UTC Source report: https://urlscan.io/result/01a16b6f-3808-719a-92bf-47493d05d29e/ - URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0aa4e-33ed-7439-8289-68f5b6ebd4ce.png Captured: 2026-09-16 13:00:54 UTC Source report: https://urlscan.io/result/01a0aa4e-33ed-7439-8289-68f5b6ebd4ce/ SHA-256: 9a15bb928e0ddec602f267f534e7c64b1a159b102bad4f4e82d21d27bef26b92 - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16b74-f66b-7036-9e70-60c8a582e5a8.png Captured: 2026-10-24 01:10:03 UTC Source report: https://urlscan.io/result/01a16b74-f66b-7036-9e70-60c8a582e5a8/ SHA-256: 12eca390f876c4102cca1d96495609f73d50d5c51c7b68b5a6d7cd57c524892c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a59d1d33-b528-4c4b-bd82-1245e7d0e285.png Captured: 2026-10-24 01:03:34 UTC Source report: https://radar.cloudflare.com/scan/a59d1d33-b528-4c4b-bd82-1245e7d0e285 SHA-256: 9ebfd270288962eb3845e84c862d7f20740ee7c283bd050cf6b74336f4473020 - URLQuery: https://screenshots.phishdestroy.io/uq/d2715449-ea52-430c-a2ac-74ea766406ce.png Source report: https://urlquery.net/report/d2715449-ea52-430c-a2ac-74ea766406ce SHA-256: d60043fbdc4fe038be8834d5d1c70e0764a40ae93044aa19d92d88cdc207c9fa - URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0aed4-9d0f-744b-9e0e-8acf376e72ff.png Captured: 2026-09-17 10:06:11 UTC Source report: https://urlscan.io/result/01a0aed4-9d0f-744b-9e0e-8acf376e72ff/ SHA-256: 2833fd6463f59e3d7c2f47fafa1b3c730006a2785753f0a82b2e2303f29851b2 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T01:33:51Z", "uuid": "01a16b6f-3808-719a-92bf-47493d05d29e", "scanned_at": "2026-10-24T01:03:46Z", "final_url": "https://capitalpro-app.digital/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://capitalpro-app.digital/", "from": "http://capitalpro-app.digital/", "status": 307 } ], "ip": "104.21.49.71", "domains": [ "cdnjs.cloudflare.com", "challenges.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflareinsights.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.17.207.5", "142.250.191.10", "104.17.25.14", "104.21.49.71" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "3f407af6bcb034edaf0469dfd323f826791f947894ed69029744f0aaa8a8d32c", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_x8qgnos", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "capitalpro-app.digital" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "capitalpro-app.digital", "protocol": "TLS 1.3", "valid_to": "2026-12-05T14:25:35Z", "valid_from": "2026-09-06T13:25:38Z" }, "domain_age_days": 47, "apex_age_days": 47, "tls_age_days": 47, "tls_valid_days": 90, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; connect-src 'se", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T01:33:52Z", "uuid": "a59d1d33-b528-4c4b-bd82-1245e7d0e285", "scanned_at": "2026-10-24T01:03:34Z", "final_url": "https://capitalpro-app.digital/", "status": 200, "history": [ { "url": "https://capitalpro-app.digital/", "status": 200 } ], "dom_hash": "b4a5529d026549645301e04d514d528c55d6de4284a037a2eba76af50e7ffde7", "doc_hash": "747766bb80b951febf9104cc7207db1b50c70951d155426c5b9691081bd17967", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "capitalpro-app.digital", "type": "A", "value": "188.114.97.0" }, { "name": "capitalpro-app.digital", "type": "A", "value": "188.114.96.0" }, { "name": "capitalpro-app.digital", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "capitalpro-app.digital", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "NETIM SAS", "created": "2026-09-06T09:56:00Z", "updated": "2026-09-11T09:56:42Z", "expires": "2027-09-06T09:56:00Z", "nameservers": [ "major.ns.cloudflare.com", "bristol.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T09:51:58Z", "analysis_at": "2026-10-16T20:29:00Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-09-06T13:13:53Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "major.ns.cloudflare.com" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:185.26.104.0/22 ~all" }, { "ttl": 300, "type": "A", "value": "172.67.160.164" }, { "ttl": 300, "type": "MX", "value": "mx1.netim.net", "priority": 10 }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "bristol.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "bristol.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:3147" }, { "ttl": 300, "type": "MX", "value": "mx2.netim.net", "priority": 10 }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:a0a4" }, { "ttl": 300, "type": "A", "value": "104.21.49.71" } ], "dns_at": "2026-10-16T20:36:24Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "capitalpro-app.digital" ], "issuer": "Google Trust Services / WE1", "serial": "3c664f81490581b6139361f1b3764cbb", "sha256": "837faf67b21f9c120d0c3a7cca334dd1341836e4ab6175c48ff36157e7586669", "subject": "capitalpro-app.digital", "valid_to": "2026-12-05T14:25:35Z", "valid_from": "2026-09-06T13:25:38Z" }, "rdap": { "status": [ "active", "client transfer prohibited" ], "events": { "expiration": "2027-09-06T21:00:00Z", "last changed": "2026-09-06T11:55:58Z", "registration": "2026-09-06T00:00:00Z", "registrar expiration": "2027-09-06T21:00:00Z", "last update of RDAP database": "2026-10-16T22:36:23Z" }, "registrar": "NETIM SAS", "registrar_iana_id": "1519" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T01:04:07Z", "mail_config": { "mx": [ "mx1.netim.net", "mx2.netim.net" ], "spf": "v=spf1 ip4:185.26.104.0/22 ~all", "spf_lookups": 0 }, "caa_records": { "domain": "capitalpro-app.digital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-14T02:06:24Z", "first": "2026-10-12T06:03:14Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.54, "avg_page_bytes": 42617 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://capitalpro-app.digital/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://capitalpro-app.digital/", "title": "Capital PRO | AI Trading Platform | Official Access Portal", "ogType": "website", "robots": "index, follow", "ogTitle": "Capital PRO | Premium AI-Driven Trading Workflows", "ogSiteName": "Capital PRO", "themeColor": "#000000", "description": "Capital PRO delivers AI-driven trading guidance and autonomous bots with calm, precise controls, crisp workflows, and risk-aware guidance for modern markets.", "twitterCard": "summary", "canonicalUrl": "https://capitalpro-app.digital/", "ogDescription": "Capital PRO delivers AI-driven trading guidance and autonomous bots with calm, precise controls, crisp workflows, and risk-aware guidance for modern markets." }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 20, "wait": 142, "connect": 6, "download": 12 }, "response_ms": 182 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 150948, "co2_grams": 0.0055, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "173.245.59.241", "host": "major.ns.cloudflare.com" }, { "ip": "162.159.38.47", "host": "bristol.ns.cloudflare.com" } ], "zone": "capitalpro-app.digital" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "capitalpro-app.digital" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "MX": [ "{\"exchange\": \"mx2.netim.net\", \"priority\": 10}", "{\"exchange\": \"mx1.netim.net\", \"priority\": 10}" ], "NS": [ "bristol.ns.cloudflare.com", "major.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"bristol.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086514, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 ip4:185.26.104.0/22 ~all" ], "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com;", "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "redirects": { "chain": [ "https://capitalpro-app.digital" ] }, "linked_pages": { "internal_count": 11 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; script-src 'self' 'unsafe-inli", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```