capcutapkofficial[.]com

This domain, capcutapkofficial.com, is identified as a brand impersonation threat designed to deceive users seeking legitimate CapCut Android applications. Analysis indicates the site mimics the official CapCut brand, offering a fraudulent APK download labeled as version V 14.4.0. The page title, 'Capcut APK for Android- Download latest version V 14.4.0 (free),' aligns with tactics commonly used to distribute malware or harvest credentials under the guise of legitimate software updates. No direct evidence of a crypto drainer kit was observed, but the infrastructure and impersonation techniques suggest potential for credential theft or device compromise. Infrastructure analysis reveals the domain was registered on March 08, 2025, through NameCheap, Inc., a registrar frequently associated with malicious activity due to its accessibility and low-cost registration options. The domain resolves to the IP address 162.0.209.159, which has been flagged in prior threat intelligence reports. Detection metrics include a VirusTotal score of 12/95 security vendors, indicating moderate consensus on its malicious nature. The domain appears on one security blocklist and was previously documented in a single AlienVault OTX threat intelligence pulse. Google Safe Browsing (GSB) does not currently list the domain, though this may reflect its recent takedown rather than a lack of prior risk. As of the latest assessment, capcutapkofficial.com has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the elevated risk level persists due to the domain's recent registration and the potential for re-emergence under similar infrastructure. Users who may have interacted with the site are advised to scan their devices for malware, reset any credentials entered on the page, and verify the authenticity of any downloaded APKs. Organizations should monitor for similar domains registered through NameCheap or resolving to the same IP range, as these may indicate ongoing or evolving campaigns targeting mobile application users.