capplace[.]com

The domain capplace.com is currently active and classified as a high‑risk generic phishing site that masquerades as a financial exchange, as indicated by its page title “CapPlace | Global Online Trading Platform” and the listed scam type “Fake Exchange.” Infrastructure analysis shows the domain resolves to IP address 172.66.41.48, which is hosted within AS13335 Cloudflare, Inc. in the United States. Registration data lists NameCheap, Inc. as the registrar, with the domain creation date of 06 Mar 2026. The authoritative name servers are harlee.ns.cloudflare.com and west.ns.cloudflare.com, and an MX record points to capplace-com.mail.protection.outlook.com, suggesting use of a Microsoft email protection service. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 framework, indicating normal TLS deployment. HTTP requests receive a 301 redirect response, and the domain appears on a single security blocklist, specifically PhishDestroy. VirusTotal analysis reports that one of ninety‑four scanned security vendors flagged the domain, providing additional corroboration of malicious intent. While the exact content of the landing page has not been examined, the combination of recent registration, Cloudflare hosting, a legitimate‑looking certificate, and the presence on a phishing blocklist strongly suggests an active credential‑harvesting operation targeting users of online trading platforms. Defenders should prioritize blocking traffic to capplace.com at perimeter firewalls and DNS filters, monitor for related email indicators tied to the Outlook MX host, and consider sinkholing the associated IP address to disrupt further activity. Ongoing vigilance is advised to detect any evolution of the campaign, as additional infrastructure or payloads may be deployed without notice.