voguishcapital[.]com

Analysis of voguishcapital.com shows a newly registered domain (creation date 2026-02-21) that is actively serving content (HTTP 200) and is hosted behind Cloudflare (IP 172.67.214.174, AS13335). The domain is registered through GoDaddy.com, LLC and uses the nameservers launch1.spaceship.net and launch2.spaceship.net. TLS termination is provided by a Sectigo Limited/DV R36 certificate. The page title advertises financial services and matches the listed scam type of brand impersonation. Automated fingerprinting reveals the presence of Google Maps, Bootstrap, LiteSpeed, Weglot, SweetAlert, OWL Carousel, Lightbox, and jQuery, indicating a typical web‑app stack rather than a specialized malware kit. VirusTotal records show 11 of 93 scanners flagging the domain, and it is listed on a single security blocklist, currently blocked by PhishDestroy. The infrastructure and content suggest a high‑risk generic phishing campaign targeting users seeking banking or loan services. Uncertainty remains regarding the exact credential‑collection mechanism, as no login form or payload details are available from the provided data. Defenders should add the domain and its resolving IP to outbound block lists, enforce DNS sink‑holing for the associated nameservers, and monitor for any related subdomains or similar registrations. Continuous re‑evaluation is advised, given the active status and recent creation date.