solvexcapitals[.]com

Analysis of solvexcapitals.com indicates a confirmed phishing domain operating under the guise of a financial investment platform. The domain, registered on July 15, 2025, through Ultahost, Inc., currently resolves to the IP address 79.133.41.61 and is secured with a Let's Encrypt SSL certificate, a common tactic to lend superficial legitimacy to fraudulent sites. The page title, 'Home - SolvexCapitals,' suggests an attempt to impersonate a capital investment or trading service, though the exact brand being mimicked remains unconfirmed due to lack of further content analysis. Infrastructure analysis reveals the use of PHP, Google Maps, Bootstrap, LiteSpeed, and other web technologies, which are typical of both legitimate and malicious sites. Detection metrics show moderate but consistent flagging: the domain appears on two security blocklists (PhishDestroy and BLP-Malware) and is recognized in 23 threat intelligence pulses on AlienVault OTX. On VirusTotal, 12 of 95 security vendors have flagged the domain as malicious, a detection rate that, while not overwhelming, confirms its classification as a high-risk threat. The domain's Gridinsoft trust score of 0/100 further corroborates its malicious status. Defenders should treat this domain as an active phishing threat, particularly targeting users seeking financial or investment services. Given its registration age (nearly one year old) and continued resolution to an active IP, the campaign appears sustained rather than opportunistic. Network-level blocking of 79.133.41.61 and domain-level filtering are recommended for mitigation. Additional monitoring of related infrastructure, such as domains registered through the same registrar or resolving to adjacent IPs, may uncover broader campaign linkages.