verify[.]1d2470918[.]icu

This domain, verify.1d2470918.icu, operates as a brand impersonation threat targeting Poshmark users. The site displays a fraudulent "Account is restricted - Poshmark" page to deceive visitors into submitting login credentials or personal information under the pretense of account verification. Such tactics are commonly used to harvest sensitive data for subsequent unauthorized access, financial fraud, or identity theft. The page title and design mimic legitimate Poshmark notifications, increasing the likelihood of successful deception among users familiar with the brand’s communication style. Analysis indicates the domain was registered on December 11, 2025, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. As of the latest scan, 3 out of 95 security vendors on VirusTotal flagged verify.1d2470918.icu as malicious, while it appears on one security blocklist. The domain resolved to the IP address 104.21.88.88, which has been linked to other suspicious infrastructure. The Gridinsoft trust score of 0/100 further corroborates the elevated risk level, reflecting a lack of legitimate use patterns and association with known malicious activity. Users who visited verify.1d2470918.icu should assume potential exposure of credentials or personal data. Immediate steps include changing passwords for Poshmark and any other accounts where identical credentials may have been reused. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access risks. Monitor financial statements and account activity for signs of fraudulent transactions. If personal or payment information was submitted, consider placing a fraud alert with credit bureaus and reporting the incident to relevant cybersecurity authorities. Avoid interacting with any communications from the domain, including emails or messages linking to it, as these may be part of follow-up phishing attempts.