veriftools[.]bz

Analysis of the domain veriftools.bz indicates it is an active phishing infrastructure currently resolving to IP address 104.21.4.104. As of July 18, 2026, the domain remains operational and is flagged by one security vendor on VirusTotal, suggesting detection of malicious activity. The exact nature of the phishing content hosted on this domain is not yet fully analyzed, though the domain name implies a fraudulent account verification or authentication portal, a common tactic used to harvest credentials. Infrastructure analysis reveals the domain is hosted on a cloud-based IP range, which is frequently utilized by threat actors to blend in with legitimate traffic and evade basic blocklists. No specific brand impersonation has been confirmed in available intelligence, so defenders should treat this as a generic credential-theft phishing site until further analysis is conducted. The risk level is classified as high due to its active status and confirmed malicious detection. Defenders are advised to block the domain and its resolving IP at perimeter security controls. Network monitoring should be implemented for connections to 104.21.4.104, particularly from endpoints handling sensitive authentication processes. If internal access to this domain is detected, immediate investigation for credential compromise or data exfiltration is recommended. Further analysis of the hosted content is required to determine the full scope of the phishing campaign.