bold-capital[.]org

Analysis of bold-capital.org shows a recent registration date of January 19, 2025 and current activity as of the report date, July 27, 2026. The domain is hosted on the IP address 91.235.142.249 and uses the authoritative name servers ns21.v-sys.org and ns22.v-sys.org. Registration was completed through the registrar GO54 LIMITED, a detail that aligns with other infrastructure observed in malicious campaigns. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one anti‑phishing provider has identified it as malicious.

VirusTotal scans report that three out of ninety‑one security vendors have flagged the domain, providing additional corroboration of its suspicious nature. However, the limited number of detections suggests that many scanners have not yet identified malicious behavior, which may be due to the domain’s recent activation or evasion techniques. No public SSL certificate information, HTTP response codes, or page‑title data are available, leaving the content of the site unverified.

Consequently, the precise phishing payload or targeted brand cannot be confirmed at this time. Defenders should consider adding bold-capital.org to internal block lists, monitor DNS queries for the associated IP and name servers, and enforce URL filtering rules that reference the PhishDestroy block. Continuous re‑evaluation is recommended, as additional detections may emerge from broader scanning platforms or community threat feeds.