limitedcap[.]com

The domain limitedcap.com is a generic phishing site designed to steal user credentials through a fraudulent login portal. It does not impersonate a specific well-known brand but presents itself as a legitimate account access page, as indicated by the observed page title 'Войти в Аккаунт | Eightcap Limited'. The site is currently taken offline, reducing immediate risk, though its prior activity classified it as an elevated threat for credential phishing.

Technical indicators confirm limitedcap.com as a phishing domain. It was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered on January 08, 2026, through Realtime Register B.V. and resolves to the IP address 45.86.231.116, hosted in Italy. The SSL certificate is issued by Let's Encrypt (R12), and the site employed technologies such as PHP, Nginx, Cloudflare, and jQuery. Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, further indicating malicious intent.

Users who interacted with limitedcap.com should immediately change passwords for any accounts accessed through the site, particularly if credentials were reused. Enable two-factor authentication (2FA) on all sensitive accounts to mitigate unauthorized access. Monitor financial and personal accounts for signs of fraud or unauthorized activity. Report the domain to relevant authorities, such as local cybercrime units or platforms like Google Safe Browsing, to aid in broader mitigation efforts.