coconutjoy[.]store

Coconutjoy.store, a phishing domain, is currently offline. It was first detected on 2026-02-23, the same day it was created, showing its rapid deployment for malicious purposes. The page title 'Mara donna' suggests a possible imitation of a brand or individual, although further details on the specific target are not available.

Despite being flagged by only 2 out of 95 vendors on VirusTotal, the domain's presence on PhishDestroy's blocklist highlights its malicious intent. The low detection rate underscores the importance of early threat identification, as phishing domains often exploit the time gap before they are widely recognized by antivirus databases.

Registered through NiceNIC International Group Co., Limited, and hosted on an IP address managed by Cloudflare, Inc., the domain lacked an SSL certificate, which is typical for many phishing sites. The absence of SSL might have been an attempt to reduce setup complexity and avoid detection. With the domain now offline, the immediate threat has been mitigated, but its brief activity period serves as a reminder of the fast-paced nature of phishing operations.