# PhishDestroy domain threat record: dobrakapitovia.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dobrakapitovia.digital/
Machine-readable companion: https://phishdestroy.io/domain/dobrakapitovia.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 08:55:34 UTC
- Last availability or vendor check: 2026-10-25 12:23:04 UTC
- Stored record updated: 2026-10-25 20:49:50 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.56.63
- Registrar in stored WHOIS data: NETIM SAS
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-09 05:59:18 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17245-4773-73b8-8719-f74b2481fceb/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dobrakapitovia.digital
- Certificate Transparency search: https://crt.sh/?q=%25.dobrakapitovia.digital
- Web Archive lookup: https://web.archive.org/web/*/https://dobrakapitovia.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed dobrakapitovia.digital as malicious after its automated intake flagged the domain because VirusTotal reported one malicious detection. The initial assessment noted that the page presents itself as an AI‑powered trading automation service and asks visitors for name, email and phone to “unlock automated trading tools,” a pattern typical of fraudulent investment schemes. The domain was first seen by PhishDestroy on 2026-10-25, when an HTTP 200 response was recorded. Google Safe Browsing did not flag the site on that date, while Cloudflare Radar later marked it as phishing and malware.

How the scam works
Fraudulent AI‑trading scams mimic legitimate investment platforms, promising high returns through proprietary bots or AI guidance. They usually collect personal information or payment details under the pretense of granting access to the promised tools, then use the data for identity theft, phishing or to pressure victims into sending cryptocurrency. No actual trading functionality is provided, and any funds transferred are lost.

Evidence
VirusTotal scanned the domain on 2026-10-24 and returned one malicious detection out of 92 engines, with SOCRadar labeling it as phishing. Google Safe Browsing checked on 2026-10-25 did not flag the site. OTX recorded five pulses referencing the domain as of 2026-10-25. Cloudflare Radar’s scan on 2026-10-25 classified the domain as malicious with phishing and malware tags, and PhishDestroy’s internal blocklist contains the domain; external blocklists showed a single Cloudflare Family block.

Infrastructure
The domain was registered on 2026-04-09 through NETIM SAS, giving it an age of 199 days at the time of first observation. The recorded IP address was 185.62.56.63, observed on 2026-10-25, belonging to ASN 62370 and listed as belonging to Snel.com B.V. in the Netherlands. DNS records at that time pointed to Cloudflare nameservers dane.ns.cloudflare.com and dee.ns.cloudflare.com. The TLS certificate, issued by ZeroSSL ECC DV SSL CA 2 on 2026-10-23, was valid until 2027-01-21.

What to do
Users should avoid submitting any personal or financial information to the site and, if they have already done so, change any associated account passwords. Organizations should block the exact domain dobrakapitovia.digital in web filters and monitor outbound traffic for connections to the recorded IP address. Apply standard phishing‑defense measures such as email filtering, user education, and review of authentication logs for any suspicious activity.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17245-4773-73b8-8719-f74b2481fceb/
Cloudflare Radar report: https://radar.cloudflare.com/scan/92c4870b-08bd-4e7e-8f1c-f657f59762f8
URLQuery report: https://urlquery.net/report/2835a8ec-1540-4dc0-8443-2005f29147cc
Stored capture screenshot: https://i.ibb.co/1GsWJtQS/97df67d9194d.png
Cloudflare Radar screenshot (2026-10-25T09:38:36Z): https://screenshots.phishdestroy.io/cf/92c4870b-08bd-4e7e-8f1c-f657f59762f8.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/2835a8ec-1540-4dc0-8443-2005f29147cc.png
URLScan screenshot (2026-10-25T08:49:15Z): https://screenshots.phishdestroy.io/us/01a1723f-baf0-76da-a9d7-c1bee7605b99.png
URLScan capture report: https://urlscan.io/result/01a1723f-baf0-76da-a9d7-c1bee7605b99/
URLScan screenshot (2026-10-25T08:53:39Z): https://screenshots.phishdestroy.io/us/01a17243-c1b9-76ec-9c8c-3d91ffee2ce0.png
URLScan capture report: https://urlscan.io/result/01a17243-c1b9-76ec-9c8c-3d91ffee2ce0/
VirusTotal report: https://www.virustotal.com/gui/domain/dobrakapitovia.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dobrakapitovia.digital
Archived copy: https://web.archive.org/web/20261025085751/https://dobrakapitovia.digital/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 10:13:43 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/1GsWJtQS/97df67d9194d.png
  Captured: 2026-10-25 08:55:34 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17245-4773-73b8-8719-f74b2481fceb.png
  Captured: 2026-10-25 08:55:34 UTC
  Source report: https://urlscan.io/result/01a17245-4773-73b8-8719-f74b2481fceb/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/92c4870b-08bd-4e7e-8f1c-f657f59762f8.png
  Captured: 2026-10-25 09:38:36 UTC
  Source report: https://radar.cloudflare.com/scan/92c4870b-08bd-4e7e-8f1c-f657f59762f8
  SHA-256: 9d159f40d1503ced3b8887d3330369197cc8169d2307be3d0977bf75c4adbba8
- URLQuery: https://screenshots.phishdestroy.io/uq/2835a8ec-1540-4dc0-8443-2005f29147cc.png
  Source report: https://urlquery.net/report/2835a8ec-1540-4dc0-8443-2005f29147cc
  SHA-256: 8716e168ddc3fb89b15a0df04063ef4db2a5fbec7d5fb04a6bbd845cb76fbc2d
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1723f-baf0-76da-a9d7-c1bee7605b99.png
  Captured: 2026-10-25 08:49:15 UTC
  Source report: https://urlscan.io/result/01a1723f-baf0-76da-a9d7-c1bee7605b99/
  SHA-256: f3bc44ea4f9b3ba9c1c49a172672887d73fdab1923b0fbf59cd4b39d8a04e3c8
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17243-c1b9-76ec-9c8c-3d91ffee2ce0.png
  Captured: 2026-10-25 08:53:39 UTC
  Source report: https://urlscan.io/result/01a17243-c1b9-76ec-9c8c-3d91ffee2ce0/
  SHA-256: b4b88b56dae9ffe0d01e1305d5f4dc58c2900f88d32316b89e62aa7ae9afd551

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T09:16:32Z",
        "uuid": "01a17245-4773-73b8-8719-f74b2481fceb",
        "scanned_at": "2026-10-25T08:55:17Z",
        "final_url": "https://dobrakapitovia.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dobrakapitovia.digital/",
                "from": "http://dobrakapitovia.digital/",
                "status": 307
            }
        ],
        "ip": "185.62.56.63",
        "ptr": "s46060.hosted-by-snel.com",
        "domains": [
            "cdn.jsdelivr.net",
            "fonts.gstatic.com",
            "challenges.cloudflare.com",
            "cdnjs.cloudflare.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.18.94.41",
            "172.253.63.94",
            "104.18.95.41",
            "104.16.124.96",
            "151.101.193.229",
            "104.17.25.14",
            "142.251.16.95",
            "185.62.56.63"
        ],
        "asns": [
            "13335",
            "15169",
            "54113",
            "62370"
        ],
        "countries": [
            "US",
            "NL"
        ],
        "doc_hash": "c0f1ed8ac8c447b6b567175b43bc170bdbc73584bb7c358c217deda419c1eec8",
        "script_hashes": [
            "373e901c0d386c4e1eefcf86879147a11af66f9e1a0d8a62d51fc6b8f50c3d0e"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "__TS_SITEKEY",
            "__tsGet",
            "__tsReset",
            "__tsNeedsClick",
            "__tsShow",
            "__lgBS",
            "ClientJS",
            "__visitorCountry",
            "turnstile"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "dobrakapitovia.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "dobrakapitovia.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-21T23:59:59Z",
            "valid_from": "2026-10-23T00:00:00Z"
        },
        "domain_age_days": 199,
        "apex_age_days": 199,
        "tls_age_days": 2,
        "tls_valid_days": 90,
        "requests": 24,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T09:41:41Z",
        "uuid": "92c4870b-08bd-4e7e-8f1c-f657f59762f8",
        "scanned_at": "2026-10-25T09:38:36Z",
        "final_url": "https://dobrakapitovia.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://dobrakapitovia.digital/",
                "status": 200
            }
        ],
        "dom_hash": "1e096733b2eedae1154319d9ae5d3f25e541d22e00e04d6bfb41d6ab5a772c24",
        "doc_hash": "c0f1ed8ac8c447b6b567175b43bc170bdbc73584bb7c358c217deda419c1eec8",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dobrakapitovia.digital",
                "type": "A",
                "value": "185.62.56.63"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.56.63",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T10:10:38Z",
        "analysis_at": "2026-10-24T04:48:18Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 35
        },
        "detections": {
            "SOCRadar": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-04-09T08:58:05Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "dee.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "dane.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "dane.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.56.63"
            }
        ],
        "dns_at": "2026-10-24T05:00:23Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "dobrakapitovia.digital"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "c196cecef82c9b20345c90ae23458bb3",
            "sha256": "b293d1710734ad12b54fbca1033b0d7eedc43e864b7b25602253dc079cb499a6",
            "subject": "dobrakapitovia.digital",
            "valid_to": "2027-01-21T23:59:59Z",
            "valid_from": "2026-10-23T00:00:00Z"
        },
        "rdap": {
            "status": [
                "active",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-04-09T21:00:00Z",
                "last changed": "2026-04-09T09:59:16Z",
                "registration": "2026-04-09T00:00:00Z",
                "registrar expiration": "2027-04-09T21:00:00Z",
                "last update of RDAP database": "2026-10-18T19:54:41Z"
            },
            "registrar": "NETIM SAS",
            "registrar_iana_id": "1519"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T09:39:48Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dobrakapitovia.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T08:57:51Z",
            "first": "2026-10-25T08:57:51Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 13870
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://dobrakapitovia.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "ogUrl": "https://dobrakapitovia.digital/",
            "title": "Dobra Kapitovia | Oficjalna Strona",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Dobra Kapitovia | AI Trading Automation & Bot Orchestration",
            "ogSiteName": "Dobra Kapitovia",
            "themeColor": "#0d1118",
            "description": "Dobra Kapitovia zapewnia wysokiej jakości automatyzację dla workflow tradingowych, obejmującą wsparcie opart na AI, orkiestrację botów i narzędzia workflow dla precyzyjnego, skalowalnego wykonywania.",
            "twitterCard": "summary",
            "canonicalUrl": "https://dobrakapitovia.digital/",
            "ogDescription": "Dobra Kapitovia delivers premium automation for trading workflows, featuring AI-guided trading support, bot orchestration, and workflow tools for precise, scalable execution."
        },
        "trackers": {
            "requests": 22,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 4
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 15,
                "tls": 34,
                "wait": 14,
                "connect": 13,
                "download": 39
            },
            "response_ms": 115
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 44496,
            "co2_grams": 0.0016,
            "cleaner_than": 39
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.33.97",
                    "host": "dane.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.93",
                    "host": "dee.ns.cloudflare.com"
                }
            ],
            "zone": "dobrakapitovia.digital"
        },
        "location": {
            "ip": "185.62.56.63",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Schiedam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "dobrakapitovia.digital"
        },
        "dns": {
            "A": [
                "185.62.56.63"
            ],
            "NS": [
                "dane.ns.cloudflare.com",
                "dee.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"dane.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416509089, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.56.63",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://dobrakapitovia.digital"
            ]
        },
        "linked_pages": {
            "internal_count": 14
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```