home[.]caozax[.]com

Analysis of home.caozax.com shows a newly registered domain (created 30 May 2026) that is currently active and classified as a high‑risk generic phishing site. The registrar information lists Fewmoretaps OU d/b/a Trustname.com, and the domain is served through Cloudflare nameservers blair.ns.cloudflare.com and rory.ns.cloudflare.com, indicating the use of a reputable DNS provider to obscure origin. DNS resolution points to the IPv4 address 64.7.198.11; no additional hosting details are available, but the address resides in a Cloudflare‑mediated range, suggesting potential use of shared infrastructure.

VirusTotal scans have returned 12 positive detections out of 91 security engines, confirming that multiple antimalware and URL‑reputation products flag the domain as malicious. The domain also appears on a single external blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its reputation as a phishing vector. No public SSL certificate details, HTTP status codes, or page‑title metadata have been published, so the content of the landing page remains unverified.

Given the combination of recent registration, active status, multiple vendor detections, and inclusion on threat intelligence blocklists, defenders should treat traffic to home.caozax.com as hostile. Recommended mitigation steps include adding the domain to network and endpoint deny lists, updating web‑gateway phishing filters, and monitoring DNS logs for queries to the associated IP address. Continuous re‑evaluation is advised, as future changes to hosting or content could alter the threat profile.