coinmarketcape[.]com

The domain coinmarketcape.com is currently classified as a high‑risk brand impersonation site targeting the Ton brand. The page title returned by the web server is "Coinmarket" and the threat type is recorded as impersonation (ton). The domain was created on April 09, 2021 and remains active as of the report date, July 12, 2026.

Infrastructure analysis shows that the domain is hosted behind Cloudflare's network (ASN 13335) and resolves to the IP address 104.21.61.62, which is located in the United States. The authoritative nameservers are gwen.ns.cloudflare.com and jerry.ns.cloudflare.com, both belonging to Cloudflare. TLS termination uses a certificate issued by Google Trust Services under the WE1 designation, and the HTTP response code is 200, indicating that the site is reachable and serving content. Detected technologies include Vue.js and the Cloudflare platform, suggesting a modern web stack.

Reputation data indicates that two out of ninety‑five security vendors on VirusTotal have flagged the domain, and it appears on one public blocklist. The site has been blocked by the PhishDestroy service, confirming that at least one anti‑phishing organization has taken action against it. Registration was performed through GoDaddy.com, LLC. No additional public intelligence on the page content is available, and the exact malicious payload or credential‑harvesting mechanisms have not been observed in the provided data.

Given the confirmed brand impersonation, the active status, and existing detections, defenders should add coinmarketcape.com to network blocklists and monitor DNS queries for the domain. Organizations using the Ton brand should educate users about the risk of fraudulent sites bearing similar names and enforce multi‑factor authentication to mitigate credential compromise. Continuous threat‑intel feeds should be consulted for any updates to the domain's detection score or emerging indicators of compromise.