coinmarketcaa[.]com

This domain is flagged for credential harvesting phishing activity targeting users of cryptocurrency and financial platforms. Analysis indicates the infrastructure was designed to deceive victims through a fabricated 'Account Suspended' notification, a common social engineering tactic to prompt urgent user interaction and credential disclosure. The threat type aligns with generic_phishing but exhibits elevated risk due to its targeted approach against financial service users. Infrastructure analysis reveals the domain was registered on June 01, 2026, through Ultahost, Inc., an entity frequently associated with abusive registrations. Detection metrics show 13 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist. The page title 'Account Suspended' serves as a technical indicator of compromise, suggesting the domain hosted a cloned interface to harvest credentials. No associated IP addresses or hosting providers were disclosed in available intelligence, limiting network-level attribution. Mitigation requires immediate blocking of coinmarketcaa.com at DNS and web proxy layers to prevent user access. Security teams should deploy signatures to detect the 'Account Suspended' page title in HTTP responses, as this string serves as a reliable indicator of this phishing campaign. User awareness training should emphasize verification of domain authenticity before entering credentials, particularly for financial services. Given the domain's takedown status, monitoring for re-registration under similar names (e.g., coinmarketcaa[0-9].com) is recommended to preempt resurgence.