capital1trading[.]com

Analysis of the domain capital1trading.com indicates active brand impersonation targeting Coinbase, a cryptocurrency exchange platform. Registered on February 21, 2026, through Name SRS AB, the domain currently resolves to IP address 91.204.209.2, hosted on AS52148 (Enix Ltd) in the United Kingdom. Infrastructure analysis reveals Cloudflare nameservers (macy.ns.cloudflare.com and marek.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The domain presents itself as a 'Tested and trusted trading platform' according to its page title, aligning with known patterns of cryptocurrency scams. Security vendor detections are limited but notable: six of ninety-five engines flagged the domain on VirusTotal, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate is classified as R10, which may indicate a low-assurance or automated issuance, though this alone is not conclusive evidence of malicious intent. No evidence currently links this domain to a specific phishing kit or broader campaign infrastructure. Defenders should treat capital1trading.com as high-risk due to its confirmed impersonation of Coinbase, recent registration, and active status. Network-level blocking of the IP (91.204.209.2) and domain is recommended. Further investigation into associated wallet addresses or transaction patterns may reveal additional fraudulent activity, though no such details are currently available in public intelligence. The exact content and functionality of the site remain unanalyzed, limiting assessment of its operational tactics.