firstcapitalsint[.]com

The domain firstcapitalsint.com was registered through Tucows Domains Inc. on August 28 2025 and is currently resolving to the IPv4 address 193.108.130.235. Its authoritative name servers are listed as ns1.dmcaignre.com, ns2.dmcaignre.com, ns1.private-nameserver.net and ns2.private-names, indicating a split‑hosting configuration that is often observed in malicious infrastructure. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has identified it as malicious.

VirusTotal reports that the domain was scanned by 91 independent scanners, none of which raised a detection; this absence of alerts does not constitute evidence of benign behavior and should be interpreted in the context of the other indicators. No public SSL/TLS certificate information, HTTP response codes, Safe Browsing verdicts, or Open Threat Exchange entries are available for this host, and the page title has not been disclosed, leaving the content of the site unverified. The current operational status is listed as active and the risk level is marked as “under investigation,” suggesting ongoing monitoring by the reporting team.

Defenders should add firstcapitalsint.com to DNS‑based block lists, enforce URL filtering rules that deny connections to the resolved IP address, and monitor outbound traffic for any attempts to reach this host. Because the domain’s infrastructure overlaps with known phishing mitigation feeds, incorporating it into existing threat‑intel enrichment pipelines will improve detection accuracy. Continuous re‑evaluation is advised as additional telemetry becomes available.