couragecoin[.]digital
“couragecoin.digital | 502: Bad gateway”
couragecoin.digital — Contenido no disponible. Resumen de las pruebas: VirusTotal 1/93 (SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: PDR.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain couragecoin.digital shows it is presently offline, returning a 502 Bad Gateway HTTP status. The site is hosted behind Cloudflare, resolving to the IP address 172.67.131.131, which belongs to ASN 13335 operated by Cloudflare, Inc., located in the United States. Registration data indicates the domain was created on 27 February 2026 through PublicDomainRegistry.com (PDR Ltd.), and the authoritative nameservers are audrey.ns.cloudflare.com and rohin.ns.cloudflare.com. No TLS certificate was observed, confirming the absence of HTTPS encryption. Threat intelligence flags the domain as a generic phishing site.
One of ninety‑three VirusTotal scanners flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, and SEAL) have already listed it as malicious. The domain also appears on three additional security blocklists, reinforcing the suspicion of abusive activity. The presence of a page title “couragecoin.digital | 502: Bad gateway” provides the only visible content clue, but no further page content has been captured. Evidence confirms that the infrastructure is typical of fast‑flux or abuse‑friendly hosting, leveraging Cloudflare’s CDN to mask the origin server. While the domain is currently offline, the combination of recent creation, lack of TLS, a flagged VirusTotal result, and inclusion on multiple phishing‑related blocklists constitutes strong indication of phishing intent.
Uncertainty remains regarding the specific payload or credential‑harvesting mechanism, as no page content or phishing kit details have been disclosed. Defenders should immediately block traffic to couragecoin.digital and its resolving IP 172.67.131.131 at network perimeters. Monitoring for any re‑appearance of the domain or related sub‑domains is advised, as the registrar and Cloudflare nameservers can be reused for future campaigns.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externos
PD-20260227-D99F8B Recipient: abuse@publicdomainregistry.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.