capitalfinanceinvestments[.]com

Analysis of the domain capitalfinanceinvestments.com indicates it is actively involved in an investment scam operation. The domain was registered on May 15, 2026, and currently resolves to the IP address 159.100.6.19, hosted under Ultahost, Inc. in Germany. The site returns an HTTP 302 redirect status, suggesting it may be funneling visitors to another malicious endpoint or evading detection through transient hosting behavior. The page title, 'Capital Finance Investments | CFD Trading — Trading on Stocks, Gold, Oil, Indices,' explicitly aligns with financial fraud targeting individuals interested in contracts for difference (CFD) trading and commodity investments. Infrastructure analysis reveals the domain is flagged by one security blocklist (PhishDestroy) and appears in one AlienVault OTX threat intelligence pulse, confirming its malicious classification. A single security vendor on VirusTotal has flagged the domain, though broader detection remains limited. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its free and automated issuance process. The domain's registration through Ultahost, Inc., a provider frequently associated with abusive infrastructure, further supports its fraudulent nature. Defenders should treat this domain as high-risk and block it at the network level. The combination of recent registration, financial-themed branding, and minimal but consistent detection across threat intelligence sources indicates an active scam operation. No legitimate financial services are known to be associated with this domain. Given the HTTP 302 behavior, security teams should investigate any downstream redirects or related infrastructure for additional compromise indicators. The exact content and functionality of the site remain unanalyzed, but the available evidence confirms its role in investment fraud.