confirmation-id77932[.]com

The domain confirmation-id77932.com was registered on June 12, 2026 through Hello Internet Corp and is currently active. Infrastructure analysis shows the domain resolves to the IP address 172.67.171.39, an address associated with a cloud hosting provider that frequently hosts short‑lived malicious sites. VirusTotal scans have returned 17 positive detections out of 91 security‑vendor submissions, indicating that a substantial subset of AV engines recognize the domain as malicious.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the likelihood of phishing use. No additional public intelligence such as page titles, SSL certificate details, or HTTP response codes is presently available, so the exact content served by the site cannot be confirmed. However, the combination of recent creation, rapid detection by multiple vendors, and inclusion on a dedicated anti‑phishing blocklist constitutes strong evidence of a phishing campaign targeting users.

Defenders should add the domain to their deny lists, enforce DNS‑based filtering for the IP 172.67.171.39, and monitor outbound traffic for any connections to the host. Continuous re‑evaluation is advised in case further indicators, such as payload samples or victim reports, emerge.