bullcapitalls[.]com

The domain bullcapitalls.com was registered on 21 February 2026 through Unstoppable Domains Inc. and is currently listed as offline. DNS resolution points to the IPv4 address 107.173.193.235, which belongs to AS36352 operated by HostPapa in the United States. The site presented a page title of “Bullcapitals | Reliable and Profitable Trading & Investment in Binary Options, Forex, Indices, CFD's”, indicating an attempt to masquerade as a financial services offering. Security scanning on VirusTotal returned three positive detections out of ninety‑five participating vendors, confirming malicious behavior.

The SSL certificate associated with the host received an R10 rating, reflecting a low trust level, and the Gridinsoft trust score is 0 out of 100, further evidencing poor reputation. The domain appears on one external security blocklist and has been actively blocked by PhishDestroy, demonstrating that at least one anti‑phishing organization has identified it as abusive. The indicated scam type is credential phishing, and the broader threat category is brand impersonation, suggesting that the site aims to harvest login credentials by exploiting the reputation of legitimate trading brands.

Because the site is offline, direct content analysis could not be performed, leaving the exact phishing workflow unverified. Defenders should continue to block the domain and its hosting IP, monitor for any future re‑registration, and ensure that email and web filters reference the observed indicators. Incident response teams should also consider updating threat intelligence feeds with the domain, IP, SSL rating, and vendor detection count to improve detection of related campaigns.