capital-index[.]com

The domain capital-index.com was registered on March 06, 2026 through Atak Domain Bilgi Teknolojileri A.S. and is currently active. The site returns HTTP 200 with a page title of “Bot Verification”, a common tactic used to evade automated analysis. The SSL certificate is issued by Google Trust Services under the WE1 authority, indicating a valid TLS connection despite the malicious purpose. Technical investigation shows that capital-index.com resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. The domain uses the Cloudflare nameservers pablo.ns.cloudflare.com and summer.ns.cloudflare.com. The IP is located in the United States. VirusTotal scans flagged the domain by 2 of 95 security vendors, and the Gridinsoft trust score is 0 out of 100, reflecting a high confidence of malicious intent. The site is classified as a social media phishing campaign and appears on three security blocklists. It is currently blocked by PhishDestroy, MetaMask, and SEAL. The combination of a fresh registration date, low trust score, and presence on multiple blocklists aligns with a high‑risk profile. The “Bot Verification” page suggests the operators aim to harvest credentials by presenting a deceptive login challenge, a pattern frequently observed in social media credential harvesting. Defenders should block network resolution to 188.114.97.3 and enforce domain filtering for capital-index.com. Email gateways should flag any messages containing links to this domain, and user awareness training should highlight the fake verification page technique. Continuous monitoring of the associated IP and related Cloudflare name servers is recommended to detect any pivoting activity.