capitradexx[.]com

Analysis of capitradexx.com shows a domain actively registered through Dynadot Inc on December 04, 2024. The domain resolves to the IPv4 address 104.21.1.206 and is served via Cloudflare nameservers kyle.ns.cloudflare.com and mallory.ns.cloudflare.com. TLS termination is provided by a Google Trust Services certificate issued to the WE1 organization, indicating the use of a reputable certificate authority but not mitigating the underlying threat.

The domain appears on a single public security blocklist and is listed as blocked by the PhishDestroy service, confirming that at least one external entity has identified it as malicious. VirusTotal records indicate the domain has been scanned by 91 antivirus and URL analysis vendors; none have raised a detection, yet the lack of positive findings cannot be interpreted as an assurance of safety, particularly given the generic phishing classification. No public page title, brand targeting, or content snapshot is presently available, leaving the specific luring technique and victim interaction undefined.

Defenders should proactively block DNS resolution for capitradexx.com, enforce outbound filtering to the associated IP address, and consider adding the domain to internal blocklists. Continuous monitoring of HTTP traffic to the IP, as well as periodic re‑scanning with updated threat intelligence services, is recommended to detect any evolution in payload or campaign tactics. Given the active status and the registrar information, the infrastructure is likely under the control of threat actors employing fast‑flux style hosting; thus, timely remediation and awareness dissemination remain critical.