capscutapk[.]com

Analysis indicates that the domain capscutapk.com is actively engaged in brand impersonation targeting users seeking CapCut software. Registered on June 1, 2023, through NameCheap, Inc., the domain resolves to IP address 172.67.147.56 and is currently flagged by two security blocklists, including PhishDestroy and BLP-Malware. The page title explicitly advertises 'CapCut PRO APK 14.5.0 Download | Video Editor [211MB]', suggesting an attempt to distribute unauthorized or malicious software under the guise of the legitimate CapCut application. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Yoast SEO, Statcounter, jQuery Migrate, jQuery, and Google AdSense, which are common technologies for both legitimate and malicious sites. The domain appears in 23 threat intelligence pulses on AlienVault OTX, reinforcing its association with malicious activity. A Gridinsoft trust score of 0/100 further supports the assessment of high risk. While five of 95 security vendors on VirusTotal flag the domain, this detection rate is not definitive on its own but aligns with broader indicators of compromise. Defenders should treat this domain as hostile infrastructure. It remains active as of July 12, 2026, and is likely distributing malware or unauthorized software. Network-level blocking is recommended, along with monitoring for related domains registered through the same registrar or resolving to the same IP. The exact content of the site has not been analyzed, so additional payloads or social engineering tactics may be present beyond the advertised APK download.