verifyio[.]store

The domain verifyio.store has been identified as a high-risk credential phishing threat. The fraudulent operation masquerades as a service titled "verifyio — The AI voice agent that calls every COD customer before you ship." It appears designed to deceive users into providing sensitive information under the guise of a legitimate AI service. This deceptive tactic aims to capitalize on users' trust in AI technologies, potentially compromising customer credentials.

In terms of technical indicators, this domain was created on May 24, 2026, and is registered through GoDaddy.com, LLC. The domain currently resolves to the IP address 216.198.79.1. Security assessments show limited detection, with only 1 out of 95 security vendors flagging this domain on VirusTotal. Despite the low detection rate, the domain is blocked by several security entities, including PhishDestroy, MetaMask, and SEAL. Additionally, it appears on three security blocklists. The domain has obtained an SSL certificate from Let's Encrypt, which may lend it undeserved credibility to unsuspecting users.

The current status of verifyio.store is active, posing an ongoing threat to potential victims. Given its presence on multiple blocklists, users are advised to exercise extreme caution and avoid interacting with this domain. Organizations and individuals should implement robust security measures, including updated threat intelligence sources and network monitoring, to detect and block access to this domain. Continuous awareness and education on identifying phishing attacks are crucial to mitigate the risks posed by such threats.