# PhishDestroy domain threat record: kapitorc.digital Content language: English Canonical HTML report: https://phishdestroy.io/domain/kapitorc.digital/ Machine-readable companion: https://phishdestroy.io/domain/kapitorc.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-09-14 18:48:04 UTC - Last availability or vendor check: 2026-10-21 22:32:34 UTC - Stored record updated: 2026-10-22 06:21:58 UTC - VirusTotal detections in the stored snapshot: 16/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Investment Scam ## Stored infrastructure - Observed IP address: 185.62.57.10 - Registrar in stored WHOIS data: NETIM SAS - Registrar country in stored WHOIS data: Unknown - Last stored HTTP status: 200 - Registration date (registry RDAP, kapitorc.digital): 2026-05-24 11:47:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0a144-5f9e-719f-ac24-02faa0177ee2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/kapitorc.digital - Certificate Transparency search: https://crt.sh/?q=%25.kapitorc.digital - Web Archive lookup: https://web.archive.org/web/*/https://kapitorc.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview kapitorc.digital presents itself as Kapitorc, an AI-powered cryptocurrency trading platform, and targets retail investors seeking automated trading returns. PhishDestroy first flagged it on 2026-09-14, and as of 2026-10-19 the site is still live with active content. The domain was registered on 2026-05-24, giving it a lifespan consistent with short-run fraud operations. How the scam works Fake exchange scams build a convincing trading interface to persuade victims to deposit cryptocurrency, sometimes showing fabricated profits to encourage larger transfers. When a victim attempts to withdraw, the platform invents fees, taxes or verification hurdles, or simply freezes the account — ensuring funds never leave the scammers' control. The AI trading angle, prominent in the page title "Kapitorc | AI Trading Platform | Official Website," is used to justify high promised returns and to discourage scrutiny before significant money is committed. Evidence Sixteen of 89 engines on VirusTotal flagged this domain as malicious as of 2026-09-24, with detections from BitDefender, ESET, Fortinet, G-Data, CRDF, CyRadar, Forcepoint ThreatSeeker and alphaMountain.ai — a cross-vendor consensus that firmly supports the fake exchange classification. The domain appears in five OTX threat intelligence pulses, reflecting independent tracking by multiple researchers. PhishDestroy has listed it on its blocklist. Infrastructure The domain was registered on 2026-05-24 through NETIM SAS and resolves to 185.62.57.10, hosted on the Snel.com B.V. network in the Netherlands. TLS is issued by ZeroSSL GmbH through its ECC DV SSL CA 2, a free certificate that requires no identity verification and is commonly used to give fraudulent sites a padlock without any accountability. What to do If you deposited funds on this platform, treat them as unrecoverable and do not send further cryptocurrency in response to any withdrawal fee or verification demand. Report the fraud to your national financial regulator and, if a card or bank transfer was involved, contact your financial institution immediately to dispute the transaction. Anyone who submitted identity documents should monitor for identity fraud and consider filing a report with local authorities. Security teams should block kapitorc.digital at the DNS and firewall level and incorporate the hosting IP 185.62.57.10 into threat feeds. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0a144-5f9e-719f-ac24-02faa0177ee2/ VirusTotal report: https://www.virustotal.com/gui/domain/kapitorc.digital Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=kapitorc.digital Archived copy: https://web.archive.org/web/20260914190422/https://kapitorc.digital/ Revoke token approvals: https://revoke.cash/ Report crypto fraud (Chainabuse): https://www.chainabuse.com/report Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 08:31:03 UTC ## Stored page captures - Primary capture: https://i.ibb.co/zHT71rnb/7c29c1913841.png Captured: 2026-09-14 18:54:51 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0a144-5f9e-719f-ac24-02faa0177ee2.png Captured: 2026-09-14 18:54:51 UTC Source report: https://urlscan.io/result/01a0a144-5f9e-719f-ac24-02faa0177ee2/ - URLScan capture 2: https://urlscan.io/screenshots/019f8910-0e69-7649-8b05-0422e5c16e56.png Captured: 2026-09-14 18:48:04 UTC Source report: https://urlscan.io/result/01a0a144-5f9e-719f-ac24-02faa0177ee2/ - URLQuery: https://screenshots.phishdestroy.io/uq/45c4e7e8-1369-4e66-8cd8-a3d1cccec17f.png Captured: 2026-09-14 18:56:26 UTC Source report: https://urlquery.net/report/45c4e7e8-1369-4e66-8cd8-a3d1cccec17f SHA-256: 8110900d36c1bb062caac9c9e83735bd94269d66079ee55cd35b27d3e20dc122 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/96b32920-a5f4-4835-aa12-990a70eca19d.png Captured: 2026-09-14 18:52:11 UTC Source report: https://radar.cloudflare.com/scan/96b32920-a5f4-4835-aa12-990a70eca19d SHA-256: 33a9692c6f84372dbd6a27534ae32630d2f8e69b02bd3e996caf1c2e6349e343 - URLScan · 2026-09-14: https://screenshots.phishdestroy.io/us/01a0a141-44b0-74bf-88be-67e956feaeb1.png Captured: 2026-09-14 18:50:10 UTC Source report: https://urlscan.io/result/01a0a141-44b0-74bf-88be-67e956feaeb1/ SHA-256: 8c8f31308661436502de2c6afad4c7739f5426c000b7ec9e862ce81878712de7 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T00:14:27Z", "uuid": "01a0a144-5f9e-719f-ac24-02faa0177ee2", "scanned_at": "2026-09-14T18:53:34Z", "final_url": "https://kapitorc.digital/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://kapitorc.digital/", "from": "http://kapitorc.digital/", "status": 307 } ], "ip": "185.62.57.10", "ptr": "s46026.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "www.cloudflare.com", "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "104.16.123.96", "142.251.211.67", "151.101.65.229", "104.17.24.14", "192.178.218.95", "185.62.57.10" ], "asns": [ "13335", "15169", "54113", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "09923c69af6a8004b3ba24cb107687c8c76843dc67b3fcb085a423d9ed432a12", "script_hashes": [ "dcffb692e1e6bda024f7830b7f5a3fa758c06ede0ac195daebf2c9fe01442f3f" ], "globals": [ "toggleTermsPopup", "intlTelInput", "ClientJS", "__visitorCountry" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "kapitorc.digital" ], "cipher": "CHACHA20_POLY1305", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "kapitorc.digital", "protocol": "TLS 1.3", "valid_to": "2026-10-19T23:59:59Z", "valid_from": "2026-07-21T00:00:00Z" }, "domain_age_days": 113, "apex_age_days": 113, "tls_age_days": 55, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T00:25:34Z", "uuid": "96b32920-a5f4-4835-aa12-990a70eca19d", "scanned_at": "2026-09-14T18:52:11Z", "final_url": "https://kapitorc.digital/", "status": 200, "history": [ { "url": "https://kapitorc.digital/", "status": 200 } ], "dom_hash": "f6d61e9c532b2699de35e4152551665b9ec04e1b35e7847259ca87d037a440e7", "doc_hash": "09923c69af6a8004b3ba24cb107687c8c76843dc67b3fcb085a423d9ed432a12", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "kapitorc.digital", "type": "A", "value": "185.62.57.10" } ], "dnssec_valid": false, "ip": "185.62.57.10", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } } } ```