confirmafut[.]fun

This domain, confirmafut.fun, was identified as part of a credential phishing infrastructure and is currently offline as of July 24, 2026. Analysis indicates the domain was registered on February 21, 2026, and resolved to the IP address 192.185.131.84, hosted under AS19871 (Network Solutions, LLC) in the United States. The SSL certificate associated with the domain is classified as R11, though further details on its validity or issuer are not provided.

The domain appears on one security blocklist, specifically PhishDestroy, which suggests prior detection as malicious. No active detections were reported by the 93 vendors that scanned the domain on VirusTotal, though the absence of flags does not confirm safety. The exact content or targeted brand of the phishing site remains unconfirmed, as no page title, kit, or brand-specific details are available in the provided data.

Defenders should treat this domain as high-risk due to its phishing classification and blocklist presence, despite its current offline status. Monitoring for re-emergence or related infrastructure (e.g., shared IP, registrar, or SSL patterns) is recommended. If the domain reactivates, immediate analysis of its content and traffic patterns should be prioritized to determine the targeted brand or service.