verifyio[.]online

PhishDestroy first observed verifyio.online on Jun 15, 2026. The captured page title is “verifyio — The AI voice agent that calls every COD customer before you ship.”. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar on Aug 5, 2026 at 14:28 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 10:20 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on May 26, 2026 at 05:01 UTC.

Cloaking was recorded with HTTP 307 on Aug 8, 2026 at 10:42 UTC. The cloaking probe recorded content split conditional delivery at 1/100 on Aug 8, 2026 at 10:42 UTC: redirect: raw=redirect_307; http=307; via=https_proxy; location=https://www.verifyio.online/; server=Vercel. Registration records for the domain list GoDaddy.com, LLC as the registrar and May 24, 2026 as the creation date. Registration preceded first observation by 21 days. At collection time, the hostname resolved to 216.198.79.1 on AS16509 (Amazon.com, Inc.). The IP and ASN identify shared Vercel edge infrastructure; the origin server is not established by this address. The evidence archive retains 1 visual capture from PhishDestroy. TLS metadata lists Let's Encrypt / R13 as the certificate issuer with validity through Aug 7, 2026; checked Jun 13, 2026 at 13:01 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.