coronads[.]art

The domain coronads.art was registered on February 21, 2026 through NameCheap, Inc. and is presently offline. DNS resolution points to the Cloudflare‑provided address 172.67.170.145, which is associated with AS13335 (Cloudflare, Inc.) and located in the United States. The domain is served by the Cloudflare nameservers cory.ns.cloudflare.com and tegan.ns.cloudflare.com, and the HTTPS endpoint presents a certificate issued by Google Trust Services under the WE1 designation. Automated scanning on VirusTotal recorded three positive detections out of ninety‑three submitted security vendors, indicating that a minority of scanners have identified malicious behavior.

The site appears on two public blocklists and is explicitly listed by PhishDestroy and ScamSniffer as a phishing‑related resource. Additional infrastructure signals include a Gridinsoft trust score of 0 out of 100, and the presence of Hostinger‑related technology signatures alongside Cloudflare and HTTP/3 protocol usage. The only visible HTTP response is a “403 Forbidden” page title, suggesting that the web server is currently denying access, which aligns with the reported offline status.

No further page content has been captured, so the specific phishing vectors, credential‑stealing forms, or targeted brands remain undetermined. Defenders should continue to block coronads.art at the DNS and network layers, monitor the associated Cloudflare IP for any re‑activation, and treat the domain as a confirmed phishing indicator. Ongoing watch‑list updates from PhishDestroy, ScamSniffer, and VirusTotal should be consulted for any changes in detection status, and any future requests to resolve the domain should be denied to prevent potential victim exposure.