couragecoin[.]digital

Analysis of the domain couragecoin.digital shows it is presently offline, returning a 502 Bad Gateway HTTP status. The site is hosted behind Cloudflare, resolving to the IP address 172.67.131.131, which belongs to ASN 13335 operated by Cloudflare, Inc., located in the United States. Registration data indicates the domain was created on 27 February 2026 through PublicDomainRegistry.com (PDR Ltd.), and the authoritative nameservers are audrey.ns.cloudflare.com and rohin.ns.cloudflare.com. No TLS certificate was observed, confirming the absence of HTTPS encryption. Threat intelligence flags the domain as a generic phishing site.

One of ninety‑three VirusTotal scanners flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, and SEAL) have already listed it as malicious. The domain also appears on three additional security blocklists, reinforcing the suspicion of abusive activity. The presence of a page title “couragecoin.digital | 502: Bad gateway” provides the only visible content clue, but no further page content has been captured. Evidence confirms that the infrastructure is typical of fast‑flux or abuse‑friendly hosting, leveraging Cloudflare’s CDN to mask the origin server. While the domain is currently offline, the combination of recent creation, lack of TLS, a flagged VirusTotal result, and inclusion on multiple phishing‑related blocklists constitutes strong indication of phishing intent.

Uncertainty remains regarding the specific payload or credential‑harvesting mechanism, as no page content or phishing kit details have been disclosed. Defenders should immediately block traffic to couragecoin.digital and its resolving IP 172.67.131.131 at network perimeters. Monitoring for any re‑appearance of the domain or related sub‑domains is advised, as the registrar and Cloudflare nameservers can be reused for future campaigns.