id-436277[.]com

Analysis for id-436277.com as of July 29, 2026 indicates the domain is actively employed in a generic phishing operation. VirusTotal reports that 15 of 91 security vendors have flagged the domain, demonstrating a moderate consensus of malicious intent across multiple scanning engines. The domain was registered on June 12, 2026 through Atak Domain Bilgi Teknolojileri A.S., a registrar that is not presently associated with known high‑risk infrastructure but whose recent creation date aligns with the emergence of the observed activity.

The domain appears on a single public security blocklist and is explicitly blocked by the PhishDestroy mitigation service, confirming that at least one commercial anti‑phishing platform has taken protective action. No additional public intelligence has been released regarding the hosting provider, IP address, ASN, SSL certificate details, HTTP response codes, or page title, so those vectors remain unknown. The absence of this information limits the ability to map the full infrastructure footprint, but the existing indicators are sufficient to classify the domain as elevated risk and to recommend immediate defensive measures.

Organizations should add id-436277.com to outbound and inbound firewall deny lists, update DNS‑based filtering policies, and ensure that endpoint protection suites are refreshed to include the latest VirusTotal signatures. Continuous monitoring of the domain’s resolution patterns and any future VirusTotal submissions is advised, as further detections could reveal additional hosting or payload characteristics. Until more concrete infrastructure data emerges, the prudent stance is to treat the domain as malicious and to block any traffic to or from it.