posh-confirm[.]shop

posh-confirm.shop is a suspected generic phishing domain that remains active and under investigation. The site presents a Cloudflare error page reading "DNS points to prohibited IP" but its registration and hosting details raise significant red flags. No specific brand is being impersonated based on available data, but the domain's purpose appears to be malicious.

This domain was created on February 21, 2026, through registrar Web Commerce Communications Limited, and resolves to IP address 104.21.83.221. It currently appears on 1 security blocklist, though VirusTotal shows 0 detections out of 95 vendors, meaning it has not yet been widely flagged. The SSL certificate is issued by Google Trust Services (WE1), which is legitimate but often misused by phishing sites. The page title indicates Cloudflare is blocking the IP, suggesting the site may have been reported or is misconfigured.

As of now, posh-confirm.shop is still active and poses a risk of credential theft or other phishing attacks. Users should avoid visiting the domain, never enter personal information, and block it at the network level. PhishDestroy recommends monitoring for similar domains and reporting any suspicious activity to security teams.