opalcapsule.live
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of opalcapsule.live
opalcapsule.live appears to be a recently registered website presenting a login page branded as Interactive Brokers and using the page title "IBKR is the Professional's Gateway to the World's Markets | Interactive Brokers Hong Kong Limited." Based on the observed content, it is not operating as an independent informational site under the opalcapsule.live name, but instead appears to mimic the branding and sign-in experience of the financial trading company Interactive Brokers.
The screenshot shows a username and password form alongside Interactive Brokers branding and references to IBKR products and services. Based on the available page content and metadata, the site appears intended to prompt visitors to enter account credentials or other sensitive information while presenting itself as if it were connected to Interactive Brokers, whose official domain is interactivebrokers.com.
Safety Assessment for opalcapsule.live
This website appears to be a phishing page impersonating Interactive Brokers and asking visitors to log in or provide sensitive details. The domain itself does not match the official Interactive Brokers domain, while the visible branding, page title, and login form closely resemble that company. Multiple web-classification providers categorize the site as phishing, spam, fraud-related, or newly registered, which materially increases concern.
At the time of this scan, the domain was flagged by 15 security engines, and blacklist checks showed an additional malicious/phishing-related listing. The domain is also only a few days old, which is a common risk factor for short-lived phishing operations. Although the malware scan did not detect malicious files and the site uses a valid TLS certificate, those points do not outweigh the stronger phishing indicators. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still adds minor caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate expiring in late January 2027. It appears to be behind Cloudflare infrastructure, with Cloudflare nameservers and a Cloudflare-hosted IP address. The web server response references Cloudflare resources, and the hosting location was identified as Toronto, Canada.
From a domain-security perspective, the domain is extremely new and DNSSEC appears to be unsigned. The use of a valid certificate and a mainstream reverse-proxy service may help the site appear more convincing, but neither of those factors should be treated as proof of legitimacy. No malicious files or iframes were detected in the limited page scan at the time of analysis.
Share your experience with this website. Was it safe? Did you encounter any issues?