coinmarketcap-all-cryptocurrencies[.]com

Analysis of coinmarketcap-all-cryptocurrencies.com confirms it as a brand impersonation scam targeting the 'across' platform, with infrastructure and detection patterns consistent with phishing operations. The domain was registered on February 23, 2026, through NiceNIC International Group Co., Limited, and resolved to IP 188.114.97.3 (AS13335 Cloudflare, Inc., US). Cloudflare nameservers (ezra.ns.cloudflare.com, margot.ns.cloudflare.com) were in use, and no SSL certificate was present. The page title, 'CoinMarketCap: Live Cryptocurrency Prices, Charts, Market Cap & Rankings,' directly mimics the legitimate CoinMarketCap brand, though the domain name and impersonation target ('across') suggest a broader cryptocurrency-related fraud scheme. Detection data is limited but indicative: the domain appears on one security blocklist (PhishDestroy) and was flagged by 2 of 93 vendors on VirusTotal.

Trust scores from Scamadviser (1/100) and Gridinsoft (0/100) further support malicious classification. As of July 25, 2026, the domain is offline, though historical resolution and registration details remain actionable for defenders. The absence of an SSL certificate and reliance on Cloudflare infrastructure are common traits in phishing domains, though not definitive alone. Defenders should treat this domain as confirmed malicious for brand impersonation.

Blocklist the domain and IP 188.114.97.3 at network and endpoint layers. Monitor for re-registration or DNS changes, as the domain may resurface. The 'across' impersonation suggests potential targeting of cryptocurrency users; correlate with related indicators (e.g., wallet addresses, transaction patterns) if observed in logs. No evidence of a specific phishing kit or payload is available, so focus on infrastructure-based detection until further analysis is possible.