confirmation-id74904[.]com

Analysis dated July 29 2026 identifies confirmation-id74904.com as an active generic phishing infrastructure. The domain was registered on June 12 2026 through Hello Internet Corp and resolves to the IPv4 address 188.114.97.3. VirusTotal records show that 15 of 91 scanned security vendors have flagged the domain, indicating a moderate consensus of malicious classification.

Independent threat intelligence sources have added the domain to a single security blocklist, and the commercial anti‑phishing service PhishDestroy reports it as blocked. No additional public data such as SSL certificate details, HTTP response codes, or page titles have been published, so those attributes remain unverified. The limited age of the domain combined with the elevated risk rating suggests recent deployment aimed at credential harvesting or similar fraudulent activity.

Defenders should proactively deny any network traffic to 188.114.97.3 associated with confirmation-id74904.com, incorporate the domain into DNS‑based filtering rules, and monitor for future sightings in broader threat feeds. Continuous re‑evaluation is recommended as additional telemetry becomes available, particularly regarding hosting environment, content served, and any observed victim interaction.