id-6362[.]world

Analysis of id-6362.world, created on 12 June 2026, shows it is currently active and associated with a generic phishing campaign. The domain is registered through Web Commerce Communications Limited operating under the WebNic.cc brand, and uses the authoritative name servers ns100.webnic.cc and ns101.webnic.cc. DNS resolution points to the IPv4 address 216.120.147.200, which is the sole host observed for this domain. The address appears on a single public blocklist and has been added to the PhishDestroy blocklist, indicating that threat‑intel feeds have already flagged it as malicious.

VirusTotal reports that 14 of 91 scanning engines have flagged the domain, providing independent confirmation of its suspicious nature. No additional public intelligence such as Safe Browsing alerts, OTX mentions, or SSL certificate details were available at the time of analysis. The limited age of the domain—less than two months old—combined with its rapid appearance on detection services suggests a deliberately provisioned infrastructure for phishing. Defenders should block DNS resolution to 216.120.147.200 and add id-6362.world to URL filtering policies.

Network monitoring should include outbound connections to the identified IP, and email security gateways should treat any messages referencing this domain as malicious. Because the underlying payload and landing page have not been publicly disclosed, further investigation of the web content is recommended to determine the specific credential‑harvesting technique employed. Continuous re‑evaluation of the domain’s status is advised, as additional indicators such as HTTP response codes or certificate fingerprints may emerge.