capitalzephyr[.]com

The domain capitalzephyr.com was registered on January 25, 2024 through Hosting Concepts B.V. d/b/a Registrar.eu and currently resolves to the IPv4 address 91.121.38.6, which is hosted in France under AS16276 (OVH SAS). The web server returns an HTTP 302 redirect and presents a Let's Encrypt certificate identified as YE1. Reputation services assign extremely low trust scores: Gridinsoft rates the site 0/100 and Scamadviser 1/100. VirusTotal analysis shows the domain flagged by two of ninety‑five security vendors. The site is listed on four security blocklists and has been actively blocked by Polkadot, PhishDestroy, Enkrypt, and Codeesura. The page title observed is "CapitalZephyr - Home" and the domain is classified as a brand‑impersonation campaign targeting the brand "base". Risk is rated high and the infrastructure remains active. While the exact phishing payload or credential‑capture mechanisms have not been publicly disclosed, the combination of low trust scores, redirection behavior, and blocklist listings strongly indicates malicious intent. Defenders should add capitalzephyr.com to deny‑list rules, monitor DNS queries for the associated IP, and enforce strict outbound filtering to prevent user access. Ongoing observation of the domain's DNS and certificate changes is advised to detect any evolution of the campaign.