register-cap[.]app

register-cap.app poses a high risk as an active generic phishing domain. The site is designed to deceive users, potentially harvesting credentials or sensitive information. The presence of a generic 'New Private Tab' page title is indicative of common phishing landing tactics, aiming to gain user trust or mask malicious intent. The domain remains operational and has been blocked by multiple security controls, underscoring its threat potential.

Technical analysis reveals several strong indicators of compromise. The domain was registered on June 16, 2026, using NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. It currently resolves to IP address 188.114.97.3. An SSL certificate issued by Google Trust Services is present, likely to impart a false sense of legitimacy. The domain has a Gridinsoft trust score of 0/100, reflecting extremely low trustworthiness. VirusTotal shows that 6 out of 95 security vendors have flagged this domain as malicious. Additionally, register-cap.app appears on two security blocklists and is referenced in two threat intelligence pulses. Both MetaMask and SEAL have blocked access to this domain, further affirming its malicious nature.

To mitigate the risk posed by register-cap.app, organizations should immediately block the domain and its associated IP address at the network perimeter. Security teams are advised to update URL filtering and threat intelligence feeds to include this indicator. End users should be educated on the dangers of interacting with unsolicited web links and taught to recognize signs of phishing, such as unfamiliar domains and generic page titles. Continuous monitoring for connections to this domain is recommended to identify and remediate any compromise resulting from user exposure.