capitalcraftlimited[.]com

The domain capitalcraftlimited.com is currently classified as a high‑risk, active credential phishing site. It was registered on June 9, 2026 and resolves to the IPv4 address 86.107.77.152, which is geolocated to Germany and hosted by HostBet Cloud Technologies Private Limited. Registration details show the registrar as Atak Domain. The site presents a valid Let’s Encrypt certificate (R12) and returns an HTTP 302 status, indicating a redirection behavior. Infrastructure analysis notes a Gridinsoft trust score of 0/100, confirming a poor reputation. The domain has been cited in four AlienVault OTX threat pulses and appears on one external blocklist; it is also actively blocked by PhishDestroy. VirusTotal records show six of ninety‑one security vendors flagging the domain, suggesting observable malicious indicators. Detected web technologies include Bootstrap, LiteSpeed, Smartsupp, jQuery, Popper, and HTTP/3, which are commonly leveraged to host deceptive pages. While the exact payload and credential‑collection mechanisms have not been publicly disclosed, the combination of recent registration, low trust score, and multiple threat‑intel mentions strongly supports the phishing designation. Defenders should immediately block both the domain and its associated IP address at network perimeters, update URL filtering rules, and monitor DNS queries for related look‑alike domains. Continuous threat‑intel correlation is advised to detect any future infrastructure changes or additional campaigns linked to this actor.