app[.]conigecko[.]live

Analysis of app.conigecko.live indicates a cryptocurrency-focused phishing domain with elevated risk classification. The domain, registered on August 21, 2025, through NiceNIC International Group Co., Limited, currently resolves to IP address 198.18.1.83 and is configured with Cloudflare nameservers (mary.ns.cloudflare.com and peyton.ns.cloudflare.com). No SSL certificate is present, increasing susceptibility to interception or manipulation of visitor traffic. The page title, 'www.www.app.conigecko.live', suggests either misconfiguration or deliberate obfuscation to evade automated detection systems.

Infrastructure inspection reveals the domain has been flagged by 17 of 95 security vendors on VirusTotal, a detection rate consistent with confirmed phishing activity. It appears on at least one security blocklist and is actively blocked by PhishDestroy. Trust assessment platforms Gridinsoft and Scamadviser both assign the lowest possible scores (0/100 and 1/100, respectively), reinforcing the domain's malicious classification. As of July 23, 2026, the domain is offline, though this status may change without notice.

While the exact content of the phishing page remains unanalysed, the domain name and infrastructure characteristics align with credential-harvesting campaigns targeting cryptocurrency users. Defenders should treat this domain as hostile and maintain blocklist entries for both the domain and its resolved IP address. Security teams are advised to monitor for related domains using similar naming patterns or infrastructure, particularly those leveraging Cloudflare nameservers or NiceNIC registration. No brand-specific indicators were present in the available data, so attribution to a specific cryptocurrency platform or service is not confirmed.