capitalsusa[.]com

The domain capitalsusa.com was first registered on October 03, 2025 through Gname.com Pte. Ltd. and is currently resolved to the IP address 172.67.179.129, which belongs to the AS13335 Cloudflare network located in the United States. Infrastructure analysis shows the domain is served behind Cloudflare’s edge platform, utilizes HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 certificate authority. The authoritative name servers are phoenix.ns.cloudflare.com and terin.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services.

Reputation services flag the site as highly risky. Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser rates it 1 out of 100. AlienVault OTX lists the domain in a single threat‑intel pulse, and two public blocklists—PhishDestroy and ScamSniffer—have added it to their deny lists. VirusTotal reports that 13 of 95 scanned security vendors label the domain as malicious, reinforcing the suspicion of abuse.

The only visible page element is the title "BlackRock," indicating a possible attempt to impersonate the financial services brand. The threat type is recorded as brand impersonation with an elevated risk rating, and the domain is currently taken offline.

Defenders should continue to block traffic to 172.67.179.129 and monitor any DNS queries for capitalsusa.com. Updating firewall and proxy rules to deny resolutions from the identified Cloudflare name servers will prevent accidental access. Because the site is already listed on multiple blocklists, adding it to internal threat‑intel feeds will provide early warning for endpoint and email security solutions. Continuous re‑scanning on VirusTotal and other sandbox environments is advised to capture any changes should the domain reactivate.