coinbase[.]cod-cupon[.]ro

This domain, coinbase.cod-cupon.ro, was registered on 16 September 2022 through Gandi SAS and currently resolves to the Cloudflare‑hosted IP address 188.114.97.3 (AS13335, United States). The site is served over HTTPS using a Google Trust Services certificate (WE1) and presents HTTP/3 with Cloudflare Browser Insights enabled. HTTP requests return status 200, and the page title “6 Cod promotional coinbase | septembrie 2025” references the Coinbase brand, confirming a targeted impersonation. VirusTotal records indicate that 13 of 95 scanned scanners flag the domain as malicious, and Gridinsoft assigns a trust score of 0 / 100. The domain appears on a single external blocklist and is listed as blocked by PhishDestroy. Classification from the available intelligence points to a crypto‑related scam, with no additional payload or credential‑harvesting details disclosed. Infrastructure analysis shows the use of Cloudflare nameservers (devin.ns.cloudflare.com, nancy.ns.cloudflare.com), which limits direct attribution but confirms a typical abuse of reputable CDN services. Defenders should add the domain to URL filtering policies, monitor DNS queries for the associated IP and nameservers, and treat any traffic to the site as hostile. Because the page content has not been publicly analyzed, further investigation should focus on capturing the landing page to verify the presence of credential‑stealing forms or malicious scripts. Continuous re‑scanning with multiple AV engines is advised to track changes in the detection profile.