voyanx[.]com

This domain, voyanx.com, is identified as a generic phishing site impersonating a legitimate IT solutions provider. Analysis indicates the page title, 'Voyanx - Premium IT Solutions | Web, Mobile & Desktop Development,' mimics professional service offerings to deceive targets into disclosing credentials or downloading malicious payloads. No specific drainer kit signatures were detected, but the domain exhibits characteristics consistent with credential harvesting or malware distribution under the guise of software development services. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 63.176.8.218 and was registered through GoDaddy.com, LLC on February 21, 2026. It is flagged by 2 out of 95 security vendors on VirusTotal and appears on 2 security blocklists. The SSL certificate is issued by Let's Encrypt, and the site employs HSTS alongside hosting technologies associated with Netlify. Despite its recent creation date, the domain has already been included in one AlienVault OTX threat intelligence pulse, suggesting active tracking by security researchers. The domain is currently offline, reducing immediate risk to end users. However, historical data indicates prior malicious activity, and the infrastructure may be repurposed for future campaigns. Organizations should maintain blocklist entries for this domain and its associated IP address. Network defenders are advised to monitor for any re-emergence of voyanx.com or related subdomains, particularly those leveraging similar impersonation tactics targeting IT service providers. Endpoint protection rules should be updated to include this domain in phishing and malware detection signatures.