zenithcorecapitals[.]com

This domain, zenithcorecapitals.com, is actively flagged as an investment scam targeting financial trading platforms. Infrastructure analysis reveals it was registered on October 13, 2025, through a hosting provider and currently resolves to IP 84.200.205.134, located in Germany under the same provider’s network. The domain uses nameservers ns1.ultahost.com through ns4.ultahost.com, reinforcing its ties to a single hosting infrastructure. A Let’s Encrypt SSL certificate is present, which is common among both legitimate and fraudulent sites but does not mitigate the risk in this case. The domain appears in 23 threat intelligence pulses, indicating widespread detection across security communities. It is blocked by at least one security vendor and holds a trust score of 1/100 from independent review platforms, further supporting its classification as malicious. The page title, 'ZenithCore Capitals | CFD Trading — Trading on Stocks, Gold, Oil, Indices,' suggests an attempt to mimic a legitimate trading platform, though no specific brand impersonation is confirmed from available data. Defenders should treat this domain as high-risk. The 301 HTTP redirect may indicate attempts to funnel victims to secondary malicious infrastructure. Network-level blocking of the IP and domain is recommended, along with monitoring for related subdomains or newly registered lookalike domains under the same provider. No evidence of takedown or inactive status was observed as of July 12, 2026.