accountverify-immediateaction[.]com

The domain accountverify-immediateaction.com is active and hosted on the IP address 52.223.13.41, which resolves to an AWS Global Accelerator node located in Canada. Registration data indicates the domain was purchased through Tucows Domains Inc., and the authoritative name servers are ns1.renewyourname.net and ns2.renewyourname.net. The site presents a valid TLS certificate issued by GoDaddy.com (GoDaddy TLS Intermediate CA DV - R1v1) and returns HTTP 200 for requests, suggesting a functional web service. Infrastructure analysis shows the domain is listed on three public security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing has flagged the site for social engineering, and AlienVault OTX references the domain in two separate threat‑intel pulses, reinforcing its malicious reputation. VirusTotal has recorded scans from 91 vendors without any detections, but the absence of detections does not constitute a safety assurance. The combination of blocklist presence, safe‑browser flagging, and threat‑intel pulses indicates a high‑risk credential‑phishing campaign. Defenders should add the domain and its resolving IP to network deny lists, monitor DNS queries for the associated name servers, and consider sinkholing traffic to mitigate potential credential harvesting. Continuous re‑evaluation is advised as the threat landscape may evolve.