confirmation-id4914[.]world

The domain confirmation-id4914.world was registered on June 12, 2026 through Web Commerce Communications Limited operating as WebNic.cc. DNS resolution points exclusively to the IPv4 address 216.120.147.200, a host that appears on a single public security blocklist and is actively blocked by the PhishDestroy sinkhole. VirusTotal has recorded 15 of 91 scanning engines labeling the domain as malicious, indicating a moderate consensus among automated detectors.

The threat profile is classified as generic phishing and the operational status is listed as active with an elevated risk rating. Evidence suggests the domain is being used to host credential‑harvesting infrastructure, although no page‑title or SSL fingerprint has been published publicly. Defenders should add the IP address and domain to outbound‑traffic denial lists, monitor DNS queries for the name, and ensure that any user‑agent that may be directed to the site is blocked at the gateway level.

Because the registration details are recent and the hosting location has not been linked to other known malicious actors, the broader campaign attribution remains uncertain. Continued observation of the host for additional payloads or command‑and‑control traffic is recommended, as is sharing any new indicators with collaborative blocklist services.