colnmarketcap-0s[.]netlify[.]app

This domain, colnmarketcap-0s.netlify.app, is currently under investigation as a generic phishing threat. As of August 02, 2026, the domain remains active and resolves to IP address 63.176.8.218. Infrastructure analysis indicates the domain is hosted through Netlify, a common platform for quickly deploying static sites, which is frequently abused for phishing campaigns due to its free tier and ease of use. The domain has been registered via Netlify's subdomain service, and nameserver records are not found, which is consistent with a directly hosted Netlify subdomain rather than a custom domain with external DNS.

VirusTotal reports that the domain has been scanned by 91 vendors, with zero currently flagging it as malicious. This absence of detections is not proof of safety, as phishing domains often evade automated scanners, especially when hosted on reputable platforms like Netlify. The domain does appear on one security blocklist, specifically PhishDestroy, which has blocked it. This single blocklist listing, combined with the domain's naming pattern that imitates a cryptocurrency market capitalization tracking site, suggests a phishing operation, though the exact page content has not yet been analyzed.

No additional details are available regarding the page title, targeted brand, or phishing kit. The domain's similarity to legitimate financial tracking services is notable, but without direct evidence, the specific brand impersonated cannot be confirmed. Defenders should treat this domain as potentially malicious, block access at the network level, and monitor for related subdomains on the same Netlify account. Users who have visited the domain should avoid entering credentials or personal information. Further investigation is recommended to capture the live content and identify the exact phishing lure. The lack of widespread detection does not diminish the risk, and proactive blocking is advised.