fidelcapital[.]org

The domain fidelcapital.org is a phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform Coinbase. It was designed to deceive victims into believing they were interacting with a legitimate service, though no crypto drainer kit was identified. As of the latest verification, fidelcapital.org has been taken offline, but its prior activity remains a confirmed scam.

Technical indicators show fidelcapital.org had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as unsafe. The domain was registered through COSMOTOWN, INC. on October 28, 2025, and resolved to the IP address 198.12.66.123, hosted by AS36352 (HostPapa) in the US. It appeared on 1 security blocklist, PhishDestroy, and had no SSL certificate issued. The observed page title was 'fidelcapital.org', and nameservers were ns1.host-forest.com and ns2.host-forest.com. Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with fidelcapital.org should immediately change any passwords entered on the site, enable two-factor authentication (2FA) on their Coinbase and other financial accounts, and monitor for unauthorized transactions. Victims are advised to report the domain to their local cybercrime unit, the Federal Trade Commission (FTC), and Coinbase’s security team. If cryptocurrency was involved, check wallet approvals and consider moving funds to a new wallet as a precaution.