confirmation-id79504[.]com

Analysis of confirmation-id79504.com shows it was registered on June 12, 2026 through Hello Internet Corp. The domain resolves to the IPv4 address 216.120.147.200. No additional hosting metadata such as ASN or geographic location is provided in the current feed. VirusTotal has recorded 16 detections out of 91 submitted scanners, indicating that a notable subset of security products recognize the domain as malicious. The domain appears on one public blocklist and is actively blocked by the PhishDestroy service, confirming that at least one defensive feed has taken it down.

The threat is classified as a generic phishing operation; no specific brand or service is identified in the available page‑title or brand fields. Defenders should prioritize adding the domain and its associated IP address to outbound and inbound filtering rules. Because the domain is already listed by at least one blocklist, integrating that list—or similar threat‑intel feeds—will provide immediate coverage. Network‑level controls that block DNS resolution for confirmation-id79504.com, as well as any traffic to 216.120.147.200, will reduce the risk of credential capture.

Endpoint security solutions that reference VirusTotal detection scores should be configured to flag the domain when encountered. Continuous monitoring for new resolutions or additional infrastructure tied to the same registrar may reveal expansion of the campaign. Until further forensic analysis of the landing page becomes available, the safe assumption is that any user interaction with the site is intended to harvest credentials or personal data, and users should be warned not to submit any sensitive information.