coipayu[.]shop

This report analyzes the domain coipayu.shop, which presents a fraudulent scheme impersonating the legitimate CoinPayu cryptocurrency platform. The page title "CoinPayu.com Desktop Setup | coinpayu" indicates an attempt to deceive users into downloading a fake desktop application or setup file, posing a direct threat of malware infection or credential theft.

Technical analysis reveals the domain was created on 2026-02-21, a very recent date consistent with malicious registration. VirusTotal detected the domain as malicious by 3 out of 95 vendors, specifically flagged by alphaMountain.ai, BitDefender, and G-Data. The domain resolves to IP address 2600:1901:0:84ef::, hosted in the United States on AS396982 Google LLC. The SSL certificate is rated E5, and the domain appears on one blocklist. ScamAdviser trust is 40 out of 100, while GridinSoft trust is 0 out of 100, with a DOM risk score of 56.

The domain is currently DOWN or OFFLINE, limiting immediate threat activity. The risk level is assessed as high based on the clear impersonation of a known brand, very recent registration, low trust scores, and multiple security vendor detections. Users should avoid any interaction with this domain or similar variants.