capitaldesire[.]online

This website, capitaldesire.online, was designed to trick visitors into thinking it was a legitimate Google service, likely to steal login credentials or other sensitive information. The page title displayed "1 new message," a common tactic to lure users into clicking a fake notification. Although the domain is now offline, anyone who visited it during its active period may have been exposed to a phishing attack.

PhishDestroy identified this threat through multiple indicators. The domain was created on September 1, 2025, and registered through HOSTINGER operations, UAB. It resolved to IP address 198.12.93.82 and had no SSL certificate, which is unusual for a site pretending to be Google. VirusTotal shows that 1 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. Additionally, AlienVault OTX includes it in one threat intelligence pulse, confirming its association with malicious activity.

If you visited capitaldesire.online, take immediate steps to protect yourself. Change your Google account password and enable two-factor authentication if you haven't already. Run a full antivirus scan on your device and monitor your accounts for any suspicious activity. Be cautious of any unsolicited messages or prompts asking for personal information, and always verify URLs before entering credentials.