authenticfx[.]live[.]cptfinance[.]com

Analysis indicates that the domain authenticfx.live.cptfinance.com is actively engaged in a crypto scam, specifically impersonating Ethereum as confirmed by the page title 'Authenticfx Live Trading – Handel met vertrouwen' and the scam type classification. The domain was registered on February 21, 2026, through eNom, LLC, and remains operational as of July 13, 2026, returning an HTTP 200 status. It resolves to the IP address 198.251.89.220, hosted on AS53667 (FranTech Solutions) in the United States. The domain utilizes nameservers dns1.name-services.com, dns2.name-services.com, and dns3.name-services.com, which are consistent with known malicious infrastructure patterns. The domain has been flagged by one security blocklist and is currently blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, indicating high risk. While VirusTotal shows only 2 of 93 security vendors detecting this domain, the low detection count does not conclusively reduce risk given the active status and confirmed impersonation of a cryptocurrency brand. The SSL certificate is issued under the R10 root, which is not inherently suspicious but does not mitigate the domain's malicious classification. Defenders should treat this domain as high-risk and prioritize blocking or monitoring any connections to it. The subdomain structure (authenticfx.live.cptfinance.com) suggests an attempt to appear legitimate under the cptfinance.com namespace, which may be abused to lend false credibility. No further details about the exact content or functionality of the site are available, but the combination of brand impersonation, crypto scam classification, and active status warrants immediate action. Additional scrutiny of related subdomains under cptfinance.com is recommended.