# PhishDestroy domain threat record: capivelle.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/capivelle.com/
Machine-readable companion: https://phishdestroy.io/domain/capivelle.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 01:03:28 UTC
- Last availability or vendor check: 2026-10-24 01:07:07 UTC
- Stored record updated: 2026-10-24 06:20:57 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.204.65
- Registrar in stored WHOIS data: NameSilo, LLC
- Last stored HTTP status: 200
- Registration date (registry RDAP, capivelle.com): 2026-09-14 15:54:21 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16b71-9180-71b8-bc44-aaf7a45e7a34/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/capivelle.com
- Certificate Transparency search: https://crt.sh/?q=%25.capivelle.com
- Web Archive lookup: https://web.archive.org/web/*/https://capivelle.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed capivelle.com as a suspicious domain based on vendor detections and automated risk scoring. The recorded page title was “Capivelle AI | Official Website [2026] Platform”. The domain was first seen by PhishDestroy on 2026-10-24, 40 days after its registration on 2026-09-14. An HTTP 200 response was recorded on 2026-10-24, but this alone does not prove malicious activity.

How the scam works
The current evidence does not reveal a specific fraud mechanism. Listings such as phishing, malware, or scam categories indicate that the domain could be used to lure users into disclosing credentials, installing unwanted software, or interacting with fraudulent financial services, but no concrete behavior was observed on the captured page.

Evidence
VirusTotal reported 11 malicious and 4 suspicious detections from 92 engines on 2026-10-24 (analysis date 2026-10-15). Google Safe Browsing showed no flag on 2026-10-24. URLScan’s automated engine flagged the URL as malicious with a score of 59, while its overall verdict was clean on 2026-09-25 and 2026-10-24. Cloudflare Radar classified the domain as phishing and malware on 2026-10-24. OTX listed five pulses referencing the domain on 2026-10-24. PhishDestroy’s internal blocklist marks the domain, while external blocklists returned zero hits on the same day.

Infrastructure
The domain was registered with NameSilo, LLC on 2026-09-14 and is protected by Cloudflare’s CDN, resolving to IP 172.67.204.65 (also 104.21.85.95) in Canada. The TLS certificate is issued by Let’s Encrypt, valid until 2026-12-23. DNSSEC is not enabled. No additional infrastructure details were observed.

What to do
Visitors should avoid entering credentials or downloading files from the site and should change any passwords used there. Organizations should block traffic to capivelle.com and monitor logs for any access attempts. Further investigation should focus on the domain’s IP addresses and certificate details as recorded.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16b71-9180-71b8-bc44-aaf7a45e7a34/
Cloudflare Radar report: https://radar.cloudflare.com/scan/32174853-4b31-47e3-822f-212e88d328d5
Stored capture screenshot: https://i.ibb.co/hFshhybj/af2d97474148.png
Cloudflare Radar screenshot (2026-10-24T01:36:24Z): https://screenshots.phishdestroy.io/cf/32174853-4b31-47e3-822f-212e88d328d5.png
URLScan screenshot (2026-09-15T00:00:24Z): https://screenshots.phishdestroy.io/us/01a0a25d-3d38-730c-8900-7629b98d4d1a.png
URLScan capture report: https://urlscan.io/result/01a0a25d-3d38-730c-8900-7629b98d4d1a/
URLScan screenshot (2026-09-25T02:59:13Z): https://screenshots.phishdestroy.io/us/01a0d680-857e-7347-b156-8ddc8f3b312d.png
URLScan capture report: https://urlscan.io/result/01a0d680-857e-7347-b156-8ddc8f3b312d/
URLScan screenshot (2026-10-24T01:10:21Z): https://screenshots.phishdestroy.io/us/01a16b75-4b7a-741a-8f22-1c336f68b0c1.png
URLScan capture report: https://urlscan.io/result/01a16b75-4b7a-741a-8f22-1c336f68b0c1/
VirusTotal report: https://www.virustotal.com/gui/domain/capivelle.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=capivelle.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 02:09:18 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/hFshhybj/af2d97474148.png
  Captured: 2026-10-24 01:07:07 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a16b71-9180-71b8-bc44-aaf7a45e7a34.png
  Captured: 2026-10-24 01:07:07 UTC
  Source report: https://urlscan.io/result/01a16b71-9180-71b8-bc44-aaf7a45e7a34/
- URLScan capture 2: https://urlscan.io/screenshots/01a0d680-857e-7347-b156-8ddc8f3b312d.png
  Captured: 2026-10-24 01:03:28 UTC
  Source report: https://urlscan.io/result/01a16b71-9180-71b8-bc44-aaf7a45e7a34/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/32174853-4b31-47e3-822f-212e88d328d5.png
  Captured: 2026-10-24 01:36:24 UTC
  Source report: https://radar.cloudflare.com/scan/32174853-4b31-47e3-822f-212e88d328d5
  SHA-256: 2b2842dfef4029b99bfacbf7bd19a6bed966637e61edfc5f5a89f80ce3de1b6b
- URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a25d-3d38-730c-8900-7629b98d4d1a.png
  Captured: 2026-09-15 00:00:24 UTC
  Source report: https://urlscan.io/result/01a0a25d-3d38-730c-8900-7629b98d4d1a/
  SHA-256: c03ad76ac668a7eda1059db40759c33007da0c8a4b71761be93eb6be6394fad9
- URLScan · 2026-09-25: https://screenshots.phishdestroy.io/us/01a0d680-857e-7347-b156-8ddc8f3b312d.png
  Captured: 2026-09-25 02:59:13 UTC
  Source report: https://urlscan.io/result/01a0d680-857e-7347-b156-8ddc8f3b312d/
  SHA-256: 22acb7deb5bc74536b42b0d4c000934fcc19df8fc6bd69b77928af100daa5c6e
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16b75-4b7a-741a-8f22-1c336f68b0c1.png
  Captured: 2026-10-24 01:10:21 UTC
  Source report: https://urlscan.io/result/01a16b75-4b7a-741a-8f22-1c336f68b0c1/
  SHA-256: edb4c27eeac23ceaad6c7e4e32c560d8265ffdd3eaeddccead471fcaabb1b48e

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T01:39:09Z",
        "uuid": "01a16b71-9180-71b8-bc44-aaf7a45e7a34",
        "scanned_at": "2026-10-24T01:06:18Z",
        "final_url": "http://capivelle.com/",
        "redirects": [
            {
                "to": "https://capivelle.com/",
                "from": "http://capivelle.com/",
                "status": 307
            },
            {
                "to": "http://capivelle.com/",
                "from": "https://capivelle.com/",
                "status": 307
            },
            {
                "to": "https://capivelle.com/",
                "from": "http://capivelle.com/",
                "status": 307
            },
            {
                "to": "https://capivelle.com/",
                "from": "https://capivelle.com/"
            }
        ],
        "globals": [
            "assert",
            "getRequiredElement",
            "P",
            "S",
            "getRandomNum",
            "getTimeStamp",
            "Dimensions",
            "Config$2",
            "getGlobalConfig",
            "setGlobalConfig",
            "Config$1",
            "Config",
            "setMaxGapCoefficient",
            "setMaxObstacleLength",
            "Status",
            "A11yStrings",
            "RunnerClasses",
            "RunnerSounds",
            "RunnerEvents",
            "updateCanvasScaling",
            "getA11yString",
            "vibrate",
            "createCanvas",
            "decodeBase64ToArrayBuffer",
            "createAdjustedCollisionBox",
            "drawCollisionBoxes",
            "boxCompare",
            "toggleHelpBox",
            "diagnoseErrors",
            "portalSignin",
            "updateForDnsProbe",
            "getMainFrameErrorCssClass",
            "getMainFrameErrorIconCssClass",
            "getSubFrameErrorIconCssClass",
            "shouldShowSuggestionsSummaryList",
            "getSuggestionsSummaryItemCssClass",
            "reloadButtonClick",
            "downloadButtonClick",
            "detailsButtonClick",
            "setAutoFetchState"
        ],
        "domain_age_days": 39,
        "apex_age_days": 39,
        "requests": 9,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 59,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T01:40:58Z",
        "uuid": "32174853-4b31-47e3-822f-212e88d328d5",
        "scanned_at": "2026-10-24T01:36:24Z",
        "final_url": "https://capivelle.com/",
        "status": 200,
        "history": [
            {
                "url": "https://capivelle.com/",
                "status": 200
            }
        ],
        "dom_hash": "ae8131ea99792fccaef116555958e1a28e28d1811c92c60ca40d7b31c49c656c",
        "doc_hash": "6f9df56b2de1d9f1b32cf689ad689773585f389dc481d4d308ea29d65cd358db",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "capivelle.com",
                "type": "A",
                "value": "172.67.204.65"
            },
            {
                "name": "capivelle.com",
                "type": "A",
                "value": "104.21.85.95"
            },
            {
                "name": "capivelle.com",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:cc41"
            },
            {
                "name": "capivelle.com",
                "type": "AAAA",
                "value": "2606:4700:3035::6815:555f"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.204.65",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-09-14T15:54:21Z",
            "updated": "2026-09-24T11:56:49Z",
            "expires": "2027-09-14T15:54:21Z",
            "nameservers": [
                "anita.ns.cloudflare.com",
                "lochlan.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T02:05:44Z",
        "analysis_at": "2026-10-15T08:21:50Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 11,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "Lionic": "phishing",
            "Sophos": "malware",
            "CyRadar": "phishing",
            "Netcraft": "malicious",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Google": "financial_services",
            "Sophos": "spyware and malware",
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "newly registered websites"
        },
        "registrar": "NameSilo, LLC",
        "created": "2026-09-14T15:54:21Z",
        "expires": "2027-09-14T15:54:21Z",
        "updated": "2026-09-24T11:56:49Z",
        "first_seen": "2026-09-14T16:33:45Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::6815:555f"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:cc41"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.85.95"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.204.65"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "anita.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "anita.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lochlan.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-15T08:27:14Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.capivelle.com",
                "capivelle.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "672c3fd9d26beee1942d1fa9fb8ffd781b2",
            "sha256": "78a0a5c236c36eea9943024852dffd115291876a2f05abec816bc1755a134e7f",
            "subject": "capivelle.com",
            "valid_to": "2026-12-23T11:00:22Z",
            "valid_from": "2026-09-24T11:00:23Z"
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "registrar_iana_id": "1479",
            "registrar_url": "http://www.namesilo.com",
            "created": "2026-09-14T15:54:21Z",
            "updated": "2026-09-24T11:56:49Z",
            "expires": "2027-09-14T15:54:21Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "anita.ns.cloudflare.com",
                "lochlan.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-10-14T20:06:42Z",
                "registration": "2026-09-14T00:00:00Z",
                "registrar expiration": "2027-09-14T00:00:00Z",
                "last update of RDAP database": "2026-10-15T08:27:14Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T01:41:19Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "capivelle.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-24T01:04:46Z",
            "first": "2026-09-15T01:26:12Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.03,
            "avg_page_bytes": 201012
        },
        "social_tags": {
            "title": "Capivelle AI | Official Website [2026] Platform",
            "robots": "index, follow",
            "canonicalUrl": "https://capivelle.com/"
        },
        "trackers": {
            "requests": 103
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 3,
                "tls": 24,
                "wait": 239,
                "connect": 6,
                "download": 45
            },
            "response_ms": 317
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 956628,
            "co2_grams": 0.035,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.234",
                    "host": "lochlan.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.194.82",
                    "host": "anita.ns.cloudflare.com"
                }
            ],
            "zone": "capivelle.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "PHPSESSID",
                    "session": true
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3031::ac43:cc41",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "capivelle.com"
        },
        "dns": {
            "A": [
                "104.21.85.95",
                "172.67.204.65"
            ],
            "NS": [
                "lochlan.ns.cloudflare.com",
                "anita.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"anita.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416254130, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3035::6815:555f",
                "2606:4700:3031::ac43:cc41"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000;",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000;",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3031::ac43:cc41",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://capivelle.com"
            ]
        },
        "linked_pages": {
            "internal_count": 60
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-09-14T15:54:21Z",
            "updated": "2026-09-24T11:56:49Z",
            "expires": "2027-09-14T15:54:21Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "anita.ns.cloudflare.com",
                "lochlan.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "strict-transport-security": "max-age=31536000;"
            }
        }
    }
}
```