keycapitals[.]ltd[.]meinuotech[.]com

Analysis conducted on July 25, 2026 identifies the domain keycapitals.ltd.meinuotech.com as an active phishing infrastructure that has been taken offline. The domain was registered on July 12, 2024 through Global Domain Group LLC and resolves to the IPv4 address 198.12.80.250, which is hosted by HostPapa (AS36352) in the United States. DNS resolution is served by ns1.coreserverhost.com and ns2.coreserverhost.com. No TLS certificate is observed, meaning the site operated over plain HTTP.

The page title returned by the web server is “keycapitalsltd”, providing no additional context about the targeted brand or service. VirusTotal scans show that three of ninety‑five antivirus and URL‑filtering engines flagged the domain, indicating malicious activity. The domain appears on a single external security blocklist and is listed with a Gridinsoft trust score of 0 out of 100, reinforcing its classification as unsafe. Defensive feeds such as PhishDestroy have already blocked the host.

Because the site is currently offline, active probing is not possible, and the exact phishing payload or credential‑ harvesting page remains unknown. Nevertheless, the combination of a recent registration, low‑reputation hosting, absence of encryption, and multiple security vendor detections confirms the domain as a high‑confidence phishing indicator. Defenders should add the domain and its associated IP address to block lists, monitor for re‑use of the same hosting infrastructure, and enforce strict outbound filtering for HTTP traffic to the identified nameservers. Continuous observation of the registrar Global Domain Group LLC for new domains with similar patterns is also advised.