coincap[.]click

This domain, coincap.click, is actively flagged as a high-risk phishing site targeting users with a fraudulent SOL-themed AI trading bot, as indicated by its page title 'SOL Sniper - AI Trading Bot for Fast.' Infrastructure analysis reveals the domain was registered on January 16, 2026, through Global Domain Group LLC and currently resolves to IP address 188.114.96.3. It is listed on five security blocklists, including SEAL, MetaMask, PhishDestroy, Maltrail, and BLP-Malware, and appears in 16 threat intelligence pulses on AlienVault OTX. The domain has a Gridinsoft trust score of 0/100, further supporting its malicious classification. Technologies detected on the domain include Node.js, Bootstrap, Vue.js, Nuxt.js, jQuery UI, jQuery, Cloudflare Browser Insights, and Cloudflare, suggesting a modern web stack potentially used to enhance credibility or evade detection. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. While no detections were reported by the 95 vendors that scanned the domain on VirusTotal, this absence does not confirm safety and should not be interpreted as an all-clear signal. Defenders should treat this domain as an active threat, particularly for users involved in cryptocurrency or trading platforms. Immediate actions include blocking the domain and its resolving IP at the network level, monitoring for related indicators of compromise, and alerting users to the presence of this phishing campaign. Given the domain's recent registration and consistent flagging across multiple security sources, it is likely part of an ongoing operation rather than an isolated incident. Further analysis of the site's content and backend infrastructure is recommended to identify additional indicators or attack vectors.