com-verifyactivity[.]info

The domain com-verifyactivity.info has been identified as a credential phishing site designed to mimic legitimate verification portals. Analysis indicates the infrastructure was used to harvest user credentials through deceptive login interfaces, though no specific brand impersonation has been confirmed. The domain is currently offline, though prior activity suggests it targeted users through social engineering tactics, likely via malicious links in emails or messaging platforms. Infrastructure analysis reveals the domain was flagged by 3 of 95 security vendors on VirusTotal, indicating moderate detection coverage. It was registered on February 21, 2026, through an undisclosed registrar and resolved to the IP address 103.71.21.64, a hosting provider commonly associated with low-reputation domains. The domain appears on three security blocklists, including MetaMask and SEAL, and received a trust score of 0/100 from Gridinsoft. The page title, 'Success!', aligns with common phishing patterns where users are misled into believing a transaction or verification process has completed successfully. Current status confirms the domain is offline, though residual risk remains due to potential reuse of the infrastructure or registration of similar domains. Organizations and users are advised to block the domain and associated IP at the network level, monitor for related phishing campaigns, and implement multi-factor authentication to mitigate credential theft risks. Security teams should review logs for connections to 103.71.21.64 and investigate any prior interactions with com-verifyactivity.info to assess potential exposure.