growthcapitallimited[.]com

growthcapitallimited.com was registered through One.com A/S on 2026-03-04. The domain resolves to the IPv4 address 46.202.142.24 and is served by the authoritative name servers horizon.dns-parking.com and orbit.dns-parking.com, both commonly associated with parking or placeholder services. The domain is listed on a single public security blocklist and is currently blocked by the PhishDestroy feed, which indicates that at least one security vendor has classified it as malicious. VirusTotal processed the domain with 91 scanning engines; none of the engines reported a detection at the time of analysis.

Although the VT scan returned no detections, the blocklist entry and the recent registration date mean the lack of detections cannot be interpreted as evidence of safety. No TLS certificate information, HTTP status codes, page title, or content signatures have been published, so the existence of a credential‑harvesting landing page or any active phishing kit cannot be confirmed. The available intelligence points toward a generic phishing operation, but the specific brand being spoofed, the lure used, or the payload delivered remain unknown.

Defenders should immediately add growthcapitallimited.com and its associated IP address (46.202.142.24) to inbound and outbound deny lists, enforce URL filtering that blocks requests to the domain, and monitor DNS queries for the horizon.dns-parking.com and orbit.dns-parking.com name servers. Continuous re‑evaluation is advised, as future scans may reveal malicious payload hashes, phishing‑kit fingerprints, or additional blocklist entries that would refine the threat profile. Organizations should also reinforce user awareness training to recognize unsolicited communications that could reference the domain, and consider network segmentation to limit potential data exfiltration should the domain be used in a credential‑stealing campaign.