coinmarketcap-vote[.]space

This domain, coinmarketcap-vote.space, poses a targeted credential theft threat to cryptocurrency users by impersonating the legitimate CoinMarketCap platform. Analysis indicates the site is designed to harvest login credentials, wallet addresses, or other sensitive information under the guise of providing cryptocurrency market data. The page title, 'Cryptocurrency Prices, Charts And Market Capitalizations | CoinMarketCap,' directly mirrors the legitimate site, increasing the likelihood of successful deception among users seeking financial data. Infrastructure analysis reveals the domain was registered on May 29, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious activity. VirusTotal detection shows 2 out of 95 security vendors flagging the domain as malicious, while it appears on three security blocklists, including MetaMask, PhishDestroy, and SEAL. The domain resolves to the IP address 172.67.166.80 and has a Gridinsoft trust score of 0/100, further confirming its high-risk nature. Technologies detected on the site include Apple iCloud Mail, Amazon Web Services, and Tengine, which are commonly leveraged to support phishing infrastructure. Users who visited coinmarketcap-vote.space should immediately revoke any credentials or wallet access shared with the site. If financial transactions were initiated, affected parties must report the incident to their cryptocurrency exchange or wallet provider and monitor accounts for unauthorized activity. Browser data, including cookies and cached credentials, should be cleared to mitigate persistent access risks. Network-level blocking of the domain and its associated IP (172.67.166.80) is recommended for organizations to prevent further exposure. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting cryptocurrency platforms.