capital-excel[.]ltd

The domain capital-excel.ltd is currently identified as an active threat associated with generic phishing. Multiple independent sources have flagged this domain: it is blocked by PhishDestroy, MetaMask, and SEAL, and is listed on three separate security blocklists. This convergence of detections across different vendors and blocklists is a significant indicator of malicious use. The domain was registered through HOSTINGER operations, UAB and became active on June 19, 2026.

Its DNS configuration uses nameservers cosmos.dns-parking.com and nova.dns-parking.com, and it currently resolves to IP address 82.197.80.62. VirusTotal results show that 2 out of 91 security vendors detect this domain as malicious, reinforcing the phishing classification. At this time, there is no information about the website's specific content, target brand, or the nature of any phishing kit in use. No additional metadata regarding SSL, HTTP status, or page title is available, so the exact tactics and lures deployed remain unconfirmed.

Defenders should treat capital-excel.ltd as high risk. Immediate action is recommended: block access to this domain at the network level, monitor for related activity originating from 82.197.80.62, and update end-user awareness regarding potential phishing threats referencing this domain. Since the domain remains active as of July 28, 2026, continued monitoring for further malicious infrastructure associated with this domain is advised. If new indicators or content evidence become available, further technical analysis should be conducted to refine detection and response strategies.