cornpound-v2[.]com

The domain cornpound-v2.com was observed in a phishing context and is currently listed as offline. Registration metadata indicate the domain was created on 21 February 2026, suggesting a short operational window before takedown. VirusTotal analysis shows that three out of ninety‑five scanning engines returned a malicious classification, confirming that at least a subset of security products recognize the site as hostile. The domain is also present on a single external blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing its reputation as a phishing vector.

The only visible attribute from the harvested page is the title string “www.www.cornpound-v2.com”, which does not disclose a targeted brand or specific credential‑capture technique. No additional intelligence such as associated IP addresses, hosting provider, SSL certificate details, or Safe Browsing verdicts is available in the current dataset. Consequently, the exact phishing lure, victim profile, and infrastructure footprint remain unknown. Given the limited but corroborated evidence, defenders should continue to enforce blocklist rules for cornpound-v2.com across perimeter and endpoint controls.

Monitoring of DNS queries for the domain can help detect any re‑activation attempts, and any future resolution to an active IP address should be re‑examined with full sandbox and URL‑analysis pipelines. Organizations that have previously observed similar phishing campaigns should verify that credential‑capture endpoints are not inadvertently whitelisted. Continuous ingestion of updated threat‑intel feeds will ensure that any new indicators, such as host or certificate changes, are promptly reflected in defensive configurations.