confirmation-id79514[.]com

The domain confirmation-id79514.com was registered on June 12, 2026 through Atak Domain Bilgi Teknolojileri A.S. and currently resolves to the IP address 104.21.16.1. VirusTotal has recorded 11 detections out of 91 scanned security vendors, indicating that a notable portion of the scanning community has identified malicious characteristics associated with the domain.

The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service, which further corroborates its classification as a threat. The risk level has been assessed as elevated and the operational status is listed as active, suggesting ongoing use in malicious campaigns. The available intelligence does not include details on SSL certificates, HTTP response codes, page titles, or any observed content, leaving the precise nature of the phishing payload undefined.

Defenders should prioritize adding the domain and its resolved IP address to network deny lists and update intrusion detection signatures to reflect the observed detection patterns. Continuous monitoring of the IP reputation and periodic re‑scanning of the domain with multiple analysis engines are advised to capture any evolution in the payload. Given the recent creation date, the infrastructure may be part of a short‑lived campaign; rapid blocking and threat‑intel sharing are recommended to mitigate exposure.