VirusTotal
2 / 89
“The Crypto Capital”
thecrypto.capital — Doğrulanmamış. Marka kimliğine bürünme: Base; Dolandırıcılık türü: Crypto Scam. Kanıt özeti: VirusTotal 2/89 (Chong Lua Dao, Gridinsoft); PhishDestroy score 81/100. Kayıt kuruluşu: GoDaddy.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain www.thecrypto.capital is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform 'base'. It operates as a cryptocurrency scam, designed to deceive victims into believing they are interacting with a legitimate service. No drainer kit was detected, but the site was actively used for fraudulent purposes before being taken offline.
Technical analysis of www.thecrypto.capital reveals limited but notable detection. As of the latest scan, 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not issue a warning. The domain appears on 1 security blocklist, specifically PhishDestroy. Registered through GoDaddy.com, LLC on November 09, 2024, it resolves to the IP address 13.60.143.163, hosted on Amazon.com, Inc. infrastructure (AS16509) in Sweden. The SSL certificate was issued by Let's Encrypt (E7), and the observed page title was 'The Crypto Capital'. Detected technologies include Ubuntu, Bootstrap, Nginx, jQuery, Mautic, and DataTables. Gridinsoft assigned a trust score of 0 out of 100, further indicating its malicious nature.
Users who interacted with www.thecrypto.capital should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords on the legitimate 'base' platform and enable two-factor authentication. Monitor accounts for unauthorized transactions and report the incident to the impersonated brand's support team. Additionally, victims can submit the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to prevent further abuse.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: timeout: raw=timeout; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='thecrypto.capital', port=80): Max retries exceeded with url: / (Caused by ConnectTimeoutEr
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns13.domaincontrol.comns14.domaincontrol.comLocation describes the IP network.
b887784acb278ea9b7986cea2c933fd3cebaa8b70da24dc5694c1acca62fc76fSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of thecrypto.capital · checked Mar 7, 2026
10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
1 topluluk üyesi tarafından bildirildi; ilk görülme 25.11.2025
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin