coincoverv3[.]com

The domain coincoverv3.com was registered through Dynadot LLC on 18 October 2025 and is currently active. DNS resolution points to IP 104.21.29.152, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are jessica.ns.cloudflare.com and nolan.ns.cloudflare.com, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 designation. The page title returned by HTTP 200 is “Coin Cover v3 - Premier Digital Asset Insurance,” indicating an attempt to masquerade as a digital‑asset insurance offering. Intelligence flags the domain as a brand‑impersonation campaign targeting the “base” brand and categorises the activity as a crypto‑related scam. Reputation scoring is extremely low, with a Gridinsoft trust score of 0 / 100, and three of ninety‑five VirusTotal scanners have raised detections. The domain is listed on four external blocklists and is actively blocked by multiple threat‑mitigation services, including Polkadot, PhishDestroy, Enkrypt, and Codeesura. While the HTTP response is reachable, no further content analysis has been performed beyond the title, leaving the specific payload and user‑interaction mechanisms unverified. Defenders should consider immediate blocking of coincoverv3.com at network perimeter, add the IP address 104.21.29.152 to deny lists, and monitor for any related C2 infrastructure that may reuse the same Cloudflare edge. Continued observation of the domain’s DNS and TLS fingerprints is recommended to detect potential re‑hosting or certificate changes.