coconutgamers[.]fun

Analysis of www.coconutgamers.fun shows an active web asset that returns HTTP 200 and is hosted behind Cloudflare (IP 188.114.97.3, Canada). The domain was registered on 27 April 2026 through GoDaddy.com, LLC and uses the Cloudflare authoritative nameservers coen.ns.cloudflare.com and jule.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services (WE1), confirming valid HTTPS connectivity. The page title “CoconutGamers — Learn. Play. Level Up.” is the only visible content; no further page‑level artifacts have been disclosed. Infrastructure scans indicate a Gridinsoft trust score of 0/100 and the site is identified by security tooling as a generic_phishing campaign. One of 91 security vendors flags the domain, and it is listed on the PhishDestroy blocklist. The combination of a newly created domain, low trust score, and inclusion on a dedicated phishing blocklist elevates the risk to high. Uncertainty remains regarding the exact credential‑harvesting workflow, payload delivery, or any secondary C&C infrastructure, as no malicious payloads or redirects have been observed. Defenders should immediately block resolution of coconutgamers.fun at the DNS layer, add the IP address 188.114.97.3 to network‑level deny lists, and monitor for any outbound connections to Cloudflare nodes that match the observed hostnames. Continued threat‑intel monitoring is advised to capture any future changes to the site’s content or additional vendor detections.