account[.]capitalearners[.]us

The domain account.capitalearners.us is a credential-phishing site designed to steal login credentials from victims. It does not impersonate a specific well-known brand but presents itself as a real estate investment platform under the name 'Capital Real Estate Investment Company.' As of the latest verification, account.capitalearners.us has been taken offline, though it previously posed an elevated risk for users who may have entered sensitive information.

Technical analysis shows that account.capitalearners.us was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Netcraft. The domain was registered through Atak Domain on January 15, 2025, and resolved to the IP address 198.23.141.202, hosted by AS36352 (HostPapa) in the US. It appeared on one security blocklist (PhishDestroy) and had no SSL certificate. The observed page title was 'Capital Real Estate Investment Company - Home,' and its nameservers were ns1.zanohosting.com and ns2.zanohosting.com. Gridinsoft assigned it a trust score of 0/100.

Users who interacted with account.capitalearners.us should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial and login activity for signs of fraud. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to help prevent further abuse.