vrfy-secure[.]com

vrfy-secure.com was registered on February 21, 2026 and is currently taken offline. DNS resolution points the domain to the IP address 172.217.16.196, which belongs to the German location of AS15169 owned by Google LLC. The site presented a page title of "Google", matching the declared target brand and confirming a credential‑phishing impersonation of Google services. VirusTotal analysis shows that 12 of 93 scanned security vendors flagged the domain as malicious, indicating a moderate consensus of compromise. The domain is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy sinkhole service.

Gridinsoft assigned a trust score of 0 out of 100, reflecting an extreme lack of confidence in the site’s legitimacy. The SSL certificate is identified only as "WE2", providing no further validation of the operator’s identity. The observed indicators suggest the infrastructure was deliberately hosted on legitimate Google‑owned IP space, a tactic often used to increase trust and evade simple IP‑based filtering.

Because the site is offline, active probing is not possible, and the exact content of the page cannot be verified beyond the page title. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration attempts, and add the associated IP address to suspicious‑IP watchlists despite its legitimate ownership. Additional investigation should focus on correlating the certificate fingerprint and any observed HTTP headers with known phishing kits, and on checking for related domains that share the same registration pattern or use the same blocklist identifiers.