devicevrfy[.]net

The domain devicevrfy.net was registered on April 28, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently resolved to the Cloudflare‑owned address 104.21.11.114, which is geolocated to Canada. The site presents an HTTP 200 response with the page title “An Error Occurred: OK”, a generic indicator that the landing page has not been publicly catalogued. Cloudflare’s DNS is used (diva.ns.cloudflare.com, henry.ns.cloudflare.com). The TLS certificate is issued by Let’s Encrypt (E7), confirming the presence of encryption but offering no credibility.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy. It has been referenced in one AlienVault OTX pulse and received detections from four of ninety‑one VirusTotal scanners, suggesting that multiple security vendors have flagged the host as malicious. Independent reputation scoring is extremely low, with Gridinsoft assigning a trust score of 0 out of 100. No additional intelligence about the specific brand or service being impersonated is available; the only observable artifact is the generic error page title.

Consequently, the primary uncertainty lies in the exact phishing template and the targeted audience, which cannot be confirmed without direct content analysis. Defenders should treat devicevrfy.net as a high‑risk indicator: add the domain and its resolving IP to web‑filter deny lists, monitor DNS queries for the Cloudflare nameservers, and enforce TLS inspection to capture any payload that may be delivered over the encrypted channel. Continuous re‑scanning with multi‑engine services is advised to capture any evolving signatures, and any inbound traffic to the IP should be logged and, where possible, redirected to a sinkhole for further forensic examination.