home[.]coavox[.]com

home.coavox.com is currently listed on at least one public phishing blocklist and is actively blocked by the PhishDestroy filtering service. DNS resolution for the domain returns the address 104.21.89.131, an IP that is hosted on a cloud‑based infrastructure commonly leveraged by malicious actors for fast‑flux or temporary campaigns. VirusTotal has recorded 11 detections out of 91 scanners, indicating that a notable minority of AV engines have classified the domain as malicious.

The presence on a blocklist, the active blocking by PhishDestroy, and the multi‑vendor detections collectively raise the confidence that the domain is being used for phishing‑related activities. No additional intelligence such as page title, SSL certificate details, or explicit impersonated brand has been published, leaving the exact payload or credential‑harvesting technique undefined. Defenders should update their URL filtering policies to include home.coavox.com in deny lists, enforce DNS sinkholing for the resolved IP, and monitor outbound traffic for connections to 104.21.89.131.

Network sensors should also flag any HTTP(S) requests to the domain for deeper inspection, and endpoint protection solutions should be configured to treat the domain as malicious based on the VirusTotal detection count. Continuous re‑evaluation is advised, as further analysis of the web content may reveal the targeted brand or additional indicators of compromise.