capitalprimefinance[.]com

PhishDestroy first observed capitalprimefinance.com on Sep 20, 2025. Stored content metadata identifies Foundation as the apparent target. The captured page title is “Home - Capitalprimefinance”. Current evidence score: 80/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and URLScan. VirusTotal recorded 10 detections among 95 engines: alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Lionic, Sophos, VIPRE on Feb 23, 2026 at 05:40 UTC. URLScan returned a malicious verdict with score 100; scan metadata assigned phishing as its category on Jul 29, 2026 at 03:40 UTC. Non-positive and contextual checks: AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 22:05 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:11 UTC; content was unavailable. Registration records for the domain list Global Domain Group LLC as the registrar and Sep 10, 2025 as the creation date. Registration preceded first observation by 9 days. At collection time, the hostname resolved to 163.61.188.89 on AS153568 (NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD). The recorded endpoint location is New York City, US. The stored server header is LiteSpeed. DOM analysis on Apr 23, 2026 at 19:23 UTC returned 30/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.

The content indicators and 2 positive source findings support the current Foundation impersonation and phishing classification. The target field identifies Foundation, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.