capitalearners[.]us

This domain, capitalearners.us, was registered on January 15 2025 through the Atak Domain registrar and is currently hosted by HostPapa (AS36352) in the United States. The authoritative name servers are ns1.zanohosting.com and ns2.zanohosting.com, and DNS resolution points to the IPv4 address 198.23.141.202. No TLS certificate is presented, indicating that the site does not serve traffic over HTTPS. The page title returned by the web server is “capitalearners.us”, and the infrastructure is explicitly classified as a brand‑impersonation campaign targeting Google.

VirusTotal scans show that three of ninety‑five security vendors flagged the domain, and both Gridinsoft and Scamadviser assign a trust score of 1 / 100. The domain appears on four independent security blocklists and is actively blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura filtering services. Current monitoring indicates the site has been taken offline, but the underlying hosting and DNS records remain active. Analysis confirms that the domain exhibits multiple high‑confidence indicators of phishing infrastructure: low trust scores, minimal vendor detections, absence of encryption, and active blocklist listings.

However, the exact phishing kit, payload, or compromised accounts have not been observed, and no content snapshot is available beyond the page title. Defenders should continue to deny connections to 198.23.141.202, add capitalearners.us to local and network‑level deny lists, and monitor the authoritative name servers for any re‑hosting attempts. Periodic re‑resolution of the domain is advised in case the operator migrates to a new IP address. Organizations using Google services should educate users about unsolicited requests that reference unknown domains and enforce multi‑factor authentication to mitigate credential compromise.