cocorost-556[.]jp

This domain cocorost-556.jp is classified as a generic_phishing infrastructure, assessed as high risk and currently taken offline. The observed behavior indicates use in deceptive authentication flows designed to harvest user credentials through imitation login interfaces. No specific brand impersonation kit is confirmed, but the naming pattern and page structure suggest opportunistic phishing deployment.

Technical intelligence confirms the domain was created on February 21, 2026 and resolves to IP 157.7.107.123 hosted in JP under AS7506 GMO Internet Group, Inc. Google Safe Browsing explicitly flags the domain as phishing. VirusTotal analysis shows 20/95 security vendors detecting malicious activity. The domain appears on 2 security blocklists, uses a Let’s Encrypt R12 SSL certificate, and is associated with PhishDestroy and PhishingDB blocking feeds.

Although currently taken offline, residual risk remains due to potential reuse of infrastructure, certificate reissuance, or domain resurrection under similar patterns. Users who interacted with the domain should assume possible credential exposure and rotate any reused passwords. Monitoring for related domains within the same ASN and certificate issuer patterns is recommended, along with proactive blocking at DNS and gateway layers to prevent reactivation impact.