confirmation-id2317[.]com

Analysis of confirmation-id2317.com indicates an active phishing infrastructure targeting user credentials. The domain was registered on June 12, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com, a registrar frequently observed in phishing campaigns due to its low-cost and minimal verification processes. As of July 29, 2026, the domain appears on one security blocklist and is flagged by 14 of 91 security vendors in VirusTotal, including detection as phishing by PhishDestroy.

The specific content or targeted brand has not been confirmed through page analysis, though the naming convention (confirmation-id2317) suggests an attempt to mimic account verification or authentication workflows, a common tactic in credential harvesting schemes. Infrastructure analysis reveals no additional hosting or SSL anomalies at this time, though the domain remains unscanned for deeper technical indicators such as HTTP headers, ASN, or geolocation. The elevated risk classification is based on the combination of recent registration, blocklist inclusion, and vendor detections, which collectively signal intent to deceive users.

Defenders should treat this domain as hostile and implement blocking at the DNS or proxy level. Further investigation into associated IPs, subdomains, or redirect chains may uncover additional infrastructure linked to this campaign. No evidence currently suggests this domain is part of a broader phishing kit or branded impersonation, though this cannot be ruled out without additional telemetry.