caplixmarket[.]com

caplixmarket.com is currently offline but historical data indicates it was used for a brand‑impersonation campaign targeting the financial‑services brand “compound”. The domain was registered on 08 August 2025 through OwnRegistrar, Inc. and resolves to the Cloudflare‑managed address 104.21.16.180, which is associated with AS13335 (Cloudflare, Inc.) located in the United States. No SSL certificate was observed, and the site presented the page title “Caplix Market – Investment & Forex Solutions”, a phrasing that aligns with the advertised scam type. Trust‑rating services assign extremely low scores: Gridinsoft rates the site 0 / 100, Scamadviser 1 / 100, and the overall risk is classified as elevated. The domain appears on a single security blocklist and is listed in one AlienVault OTX pulse, confirming that at least one threat‑intel feed has flagged the indicator.

VirusTotal analysis recorded six detections out of ninety‑five scanners, indicating partial consensus among antivirus engines. The authoritative nameservers are angela.ns.cloudflare.com and max.ns.cloudflare.com, confirming that the domain used Cloudflare’s DNS infrastructure. PhishDestroy has also blocked the domain, reinforcing its malicious reputation. Evidence stops short of providing a full payload description, login page capture, or concrete indicators of compromise beyond the infrastructure details already listed.

Consequently, the precise phishing kit, hosting of malicious binaries, or exfiltration methods remain unknown. Defenders should add 104.21.16.180 to network‑level deny lists, monitor DNS queries for caplixmarket.com and its Cloudflare nameservers, and incorporate the domain into endpoint detection rules that trigger on any attempted connections.