path-capitals[.]ltd

This domain, path-capitals.ltd, is identified as a brand impersonation threat targeting Base, a cryptocurrency platform. Analysis confirms the site operated as a phishing endpoint designed to deceive users into disclosing credentials or transferring assets under false pretenses. The domain is currently offline, but prior activity aligns with credential harvesting and financial fraud tactics. Infrastructure analysis reveals the domain was registered on April 27, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu and resolved to the IP address 198.12.80.250. Security vendor assessments flagged the domain as malicious, with 3 of 95 VirusTotal engines detecting it as a threat. Additional indicators include a Gridinsoft trust score of 0/100 and inclusion on one security blocklist. The page title, 'Path Capitals,' was used to mimic legitimate financial services, further supporting the impersonation narrative. The domain is no longer active, but residual risk remains for users who may have interacted with it prior to takedown. Organizations are advised to monitor network logs for connections to 198.12.80.250 and the domain path-capitals.ltd. Users should verify financial communications through official Base channels and report any suspicious activity. Security teams should update blocklists to include this domain and associated IP to prevent future exposure.