coinmarketcapblockvote-cc[.]netlify[.]app

This domain, coinmarketcapblockvote-cc.netlify.app, is flagged as an active generic phishing site targeting cryptocurrency users. Analysis indicates the domain was registered through Netlify, a legitimate hosting provider often exploited for phishing due to its free tier and ease of deployment. As of July 28, 2026, the domain remains active and resolves to the IP address 35.157.26.135, which has been associated with other malicious infrastructure in recent months. Infrastructure analysis reveals the domain lacks configured nameservers (NS_NOT_FOUND), a common red flag for hastily deployed phishing sites or domains set up for short-term abuse.

Detection data shows the domain is blocked by three security blocklists, including PhishDestroy, MetaMask, and SEAL, which specialize in cryptocurrency-related threats. One of 91 security vendors on VirusTotal has flagged the domain, suggesting initial but growing detection coverage. The domain's presence on multiple blocklists, combined with its registration under a hosting provider frequently abused for phishing, increases the likelihood of malicious intent. No specific brand or scam type is confirmed in the available data, but the domain name suggests an attempt to mimic cryptocurrency tracking or voting platforms, potentially to harvest credentials or private keys.

Defenders should treat this domain as high-risk and prioritize blocking it at the DNS, proxy, or endpoint level. Given the domain's association with Netlify, organizations may also consider monitoring or restricting deployments from free-tier hosting services known to be abused by threat actors. The domain's continued activity and lack of nameserver configuration further indicate it is likely part of an ongoing phishing campaign. Additional analysis of the site's content, if accessible, would be required to determine the exact phishing kit or payload in use.