eightxcap[.]online

On 22 July 2026 analysts observed that the domain eightxcap.online, created on 21 February 2026 and hosted by Hostinger International Limited (AS47583) in Malaysia, was taken offline after being identified as a brand‑impersonation site targeting Ethereum. The site resolved to the IPv6 address 2a02:4780:5c:2188:0:220f:902e:b and used the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. No TLS certificate was presented, indicating the site was served only over HTTP. VirusTotal recorded 2 detections out of 93 scanned security vendors, confirming that at least a minority of scanners flagged the domain as malicious.

The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low reputation. The only visible page title returned by the web server was the Thai string “ข้อความใหม่ 1 ข้อความ”, which provides no indication of the intended malicious payload. The intelligence does not reveal the specific luring technique, credential‑harvesting page, or any associated command‑and‑control infrastructure, so the full operational profile remains uncertain.

Defenders should continue to block eightxcap.online at perimeter filters, DNS resolvers, and endpoint protection solutions, and monitor for any future re‑registration of the same name or similar sub‑domains. Threat‑intel feeds should be updated to reflect the brand‑impersonation classification targeting Ethereum, and any alerts referencing the IPv6 address or the Hostinger parking nameservers should be investigated for potential reuse. Because the site is currently offline, active takedown is not required, but continued observation is advised to detect possible resurrection or migration to alternative hosting.