app[.]voguishcapital[.]com

This report details the threat analysis of app.voguishcapital.com, which presents itself as a login page for "Voguish Capital" but is a credential phishing site impersonating the DHL brand. The primary threat is the theft of user login credentials, which could be used for unauthorized access to accounts or further compromise.

Technical evidence from the provided data shows the site has 10 detections out of 95 VirusTotal vendors, flagged by BitDefender, CRDF, CyRadar, ESET, and Fortinet. It is hosted on IP address 172.245.14.131 in the United States, under AS36352 HostPapa. The domain was created on 2026-02-21, uses SSL certificate R13, and has a GridinSoft trust score of 0 out of 100. The site is also listed on 1 blocklist.

The current status of the site is DOWN or OFFLINE, with a Domain Risk Score of 88, indicating a high risk level. While the site is not accessible at the time of analysis, the underlying domain and infrastructure remain a potential threat if reactivated.