cobaipay[.]com

cobaipay.com is presently classified as a generic phishing site with an elevated risk rating. The domain resolves to the IPv4 address 65.98.127.26, which is the sole hosting indicator observed. It appears on one public blocklist and is actively blocked by the PhishDestroy filtering service. VirusTotal analysis shows that 2 of 91 scanned security vendors have flagged the domain, indicating that a minority of scanners have identified malicious behavior.

No additional intelligence such as registrar details, SSL certificate data, HTTP response codes, or page title has been disclosed, and the content of the landing page remains unverified in the current data set. The limited detection footprint suggests a low‑profile deployment, but the presence on a blocklist and the positive detections by multiple vendors confirm that the domain is being used for phishing attempts. Defenders should add 65.98.127.26 to network‑level deny lists, enforce DNS filtering for cobaipay.com, and monitor outbound connections to the address.

Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are recommended to capture any changes in detection rates. Organizations employing email security gateways should treat any communications referencing cobaipay.com as malicious and quarantine or reject them. Incident response teams should collect any observed payloads or logs that reference the domain for deeper forensic analysis.