confirmation0426[.]info

The domain confirmation0426.info was registered on June 12, 2026 through Web Commerce Communications Limited dba WebNic.cc and is served by the authoritative name servers ns100.webnic.cc and ns101.webnic.cc. DNS resolution points to the single IPv4 address 216.120.147.200, indicating a low‑complexity hosting setup that is typical of short‑lived phishing infrastructure. The domain is currently listed on one public security blocklist and has been manually blocked by the PhishDestroy feed, providing early indicator coverage for defenders that rely on external blocklist feeds.

VirusTotal has recorded detections from 14 of 91 scanning engines, confirming that the site exhibits characteristics that trigger multiple anti‑malware signatures. No additional reputation data, such as Safe Browsing status, OTX tags, SSL certificate details, or HTTP response codes, are available in the current intelligence set, and the page title or landing‑page content has not been harvested. Consequently, the exact brand or service being impersonated remains unknown, and the malicious payload or credential‑ harvesting mechanism cannot be described at this time.

Analysts should treat the domain as an active generic phishing threat and incorporate the IPv4 address and fully‑qualified domain name into perimeter defenses, including DNS blocklists, proxy filters, and intrusion‑prevention signatures. Continuous monitoring of traffic to 216.120.147.200 is recommended to detect any future use of the host for additional campaigns, and periodic rescanning of the domain should be scheduled to capture any changes in page content or technology stack that may reveal the targeted brand or provide further forensic artefacts.