caupcutapk[.]com

Analysis of the domain caupcutapk.com indicates a high-risk brand impersonation campaign targeting users of the CapCut application, as evidenced by the page title 'Download CapCut Pro APK Latest (V15.10.7) For Andriod 2026'. The domain was registered on February 21, 2026, through the registrar Spaceship, Inc. and is currently offline. Infrastructure analysis reveals the domain resolved to the IP address 82.180.152.43, hosted by AS47583 (Hostinger International Limited) in Singapore. No SSL certificate was detected, increasing the risk of unencrypted data transmission.

Detection metrics show the domain is flagged by 16 of 93 security vendors on VirusTotal, though this does not represent exhaustive validation. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is referenced in one AlienVault OTX threat intelligence pulse. The domain uses nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration commonly associated with low-cost or disposable hosting environments. Gridinsoft assigns a trust score of 0/100, further indicating malicious intent.

The specific content of the phishing page remains unanalyzed beyond the provided page title, which explicitly promotes a purported CapCut Pro APK download. Defenders should treat this domain as a confirmed threat vector for distributing malicious software under the guise of a legitimate application. Organizations are advised to block the domain, IP, and associated nameservers at the network level, and to monitor for related infrastructure registered through Spaceship, Inc. or hosted on AS47583. Given the domain's current offline status, continued vigilance is recommended to detect potential re-emergence or shifts to alternative hosting.