confirmation-id619364[.]com

On 29 July 2026 the domain confirmation-id619364.com was observed in active status with elevated risk. The domain was registered on 12 June 2026 through Hello Internet Corp. DNS resolution points to IP address 104.21.96.1, which is part of a large content‑delivery network commonly leveraged for fast‑flux and proxy services. VirusTotal reports that 18 of 91 scanned security vendors have flagged the domain as malicious, indicating a consensus of detection across multiple engines.

The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy sink‑hole service, demonstrating that at least one anti‑phishing platform has taken mitigation action. No public page title, SSL certificate details, or HTTP response codes have been disclosed, so the content and exact phishing vector remain unverified. The lack of additional blocklist entries or broader community reports suggests limited exposure at the time of analysis, but the presence of multiple vendor detections and active blocking indicates a functional malicious campaign.

Defenders should add confirmation-id619364.com to URL filtering and endpoint allow‑list exclusions, monitor DNS queries for the associated IP address, and consider pre‑emptive blocking at the network perimeter. Continuous re‑evaluation is advised to capture any changes in hosting, content, or detection status.