kapitexai[.]live

This domain, kapitexai.live, is identified as a phishing infrastructure targeting users of AI-assisted trading platforms. Analysis indicates the site impersonates a legitimate service under the guise of "KapitexAI | Official Platform for AI Assisted Trading," aiming to harvest credentials or financial information from unsuspecting victims. The domain is currently offline, but prior activity and infrastructure details remain relevant for threat assessment. Infrastructure analysis reveals the domain was registered on May 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolved to the IP address 172.67.167.185, a Cloudflare-associated endpoint often leveraged to obfuscate malicious origins. The domain holds a Gridinsoft trust score of 0/100 and appears on one security blocklist. VirusTotal reports indicate that 5 of 95 security vendors flagged the domain as malicious, while its SSL certificate was issued by Let's Encrypt, a common tool used by threat actors to lend superficial legitimacy to phishing sites. The current status of kapitexai.live is offline, though its prior operational state and technical indicators suggest a deliberate phishing campaign. Organizations and individuals are advised to treat this domain as compromised and implement the following measures: block the domain and associated IP (172.67.167.185) at the network level, monitor for credential reuse attempts tied to the impersonated brand, and educate users on recognizing AI-themed financial scams. Security teams should also review logs for prior interactions with the domain and investigate any anomalous login attempts linked to the platform's purported services.