confirmation-id8582[.]com

This domain was registered on June 12, 2026 through Hello Internet Corp and is hosted on the IP address 216.120.147.200. The authoritative name servers are ns100.webnic.cc and ns101.webnic.cc, indicating the use of the WebNIC DNS service. Within two weeks of registration the domain appeared on a commercial phishing blocklist and has been listed by PhishDestroy, confirming that it is currently being used for malicious activity. VirusTotal scans show that 13 of 91 security vendors flag the domain as malicious, providing independent corroboration of the phishing classification.

The domain is marked as active and assigned an elevated risk level by the reporting system. No public SSL certificate details, HTTP response codes, or page title information are available in the current intelligence set, so the exact content served by the site cannot be verified at this time. Likewise, Safe Browsing, OTX, and additional blocklist entries have not been reported, leaving a gap in the broader threat‑intel context. Defenders should block any outbound or inbound traffic to 216.120.147.200 and add confirmation-id8582.com to DNS sink‑hole or firewall deny lists.

Monitoring of the WebNIC name servers for new sub‑domains may reveal further malicious infrastructure. Continuous re‑scanning with VirusTotal or similar multi‑engine services is advised to capture any changes in vendor detections. Organizations that employ email filtering should keep the domain on phishing‑related blocklists and consider adding it to real‑time URL reputation feeds. Given the recent creation date and early detection by multiple vendors, the domain is likely part of a short‑lived phishing campaign; prompt containment reduces exposure to credential‑theft attempts.