capitalboomglobe[.]com

Analysis indicates that capitalboomglobe.com was registered on 23 February 2026 through Host Africa (Pty.) Ltd. The domain resolves to IP 91.230.49.19, which is assigned to AS62068 SpectraIP B.V. in the Netherlands. The authoritative nameservers are ns100.mypowerfulserver.com and ns200.mypowerfulserver.com. An HTTPS certificate issued by Let’s Encrypt (valid for 90 days) is present, confirming that TLS is correctly negotiated but provides no assurance of legitimacy. HTTP requests return a 302 redirect, a pattern frequently used by phishing infrastructure to forward victims to malicious payloads after initial capture. Reputation services have flagged the domain.

Gridinsoft assigns a trust score of 1 out of 100, indicating extreme suspicion. VirusTotal reports that 12 of 93 scanned security vendors label the domain as malicious, reinforcing the suspicion. The domain appears on three independent blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that multiple defensive platforms have identified it as a phishing vector. The page title advertised as “CAPITAL BOOM GLOBE | Safe investment with CAPITAL BOOM GLOBE” suggests an investment‑related lure, but no further content analysis is available.

The current status is listed as active, meaning the site remains reachable despite the blocklist entries. Uncertainty remains regarding the exact payload delivered after the redirect, the specific phishing kit employed, and any compromised credentials that may have been harvested. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for outbound connections to 91.230.49.19, and incorporate the domain hash into endpoint detection rules. Analysts should request a full content scrape to verify whether credential‑collection forms are present, and consider sharing the indicators with broader threat‑intel communities to improve collective detection.