coralsunmarine[.]com

The domain coralsunmarine.com is identified as a generic phishing domain, specifically a fake login site. The current status of the domain is offline, indicating that it has been taken down or is no longer active. However, it remains a significant concern due to its previous activities and the potential for reuse.

Infrastructure analysis reveals that coralsunmarine.com was registered through Domain.com - Network Solutions, LLC, and resolves to the IP address 23.111.133.162, which is located in the United States under the Autonomous System (AS) AS29802 HIVELOCITY, Inc. The domain was created on February 21, 2026, and has been flagged by 15 out of 95 security vendors on VirusTotal. Additionally, it appears on 2 security blocklists, including PhishDestroy and CryptoFirewall. The SSL certificate for the domain is issued by Let's Encrypt, specifically the R13 root certificate, which is a common practice for phishing sites to appear more legitimate.

Despite the current offline status, security professionals and users are advised to remain vigilant. The domain should be added to internal blocklists to prevent accidental access. Network administrators should monitor for any signs of the domain becoming active again and take proactive measures to protect their networks. Users should be educated on the signs of phishing and encouraged to report any suspicious activity immediately.