verbeirinternationalschool-drive[.]online

On 24 July 2026 the domain verbeirinternationalschool-drive.online was noted as offline but retains multiple indicators of recent malicious use. The domain was created on 21 February 2026 and registered through Automattic Inc., a registrar frequently associated with Wix‑hosted websites. DNS resolution points to the IPv4 address 185.230.63.107, which belongs to AS58182 owned by Wix.com Ltd., confirming that the site leveraged Wix's shared hosting infrastructure. No SSL certificate was presented, leaving any communication unencrypted and vulnerable to interception.

An HTTP request returned the page title "Home | AAAAAAHYQDE256478496", a nonsensical string that offers no legitimate brand context, and no further page content has been captured, so the exact phishing payload or credential‑collection mechanism remains unknown. VirusTotal analysis recorded 14 detections out of 95 scanning engines, indicating a consensus among multiple security vendors that the domain is malicious. The domain appears on one public security blocklist and is specifically listed by PhishDestroy, reinforcing its classification as a phishing resource. AlienVault OTX cited the domain in a single threat‑intel pulse, and Gridinsoft assigned a trust score of 0 / 100, reflecting an extremely low trust rating.

Although the site is currently offline, the convergence of vendor detections, blocklist entries, and low trust scores suggests it was actively used for credential‑theft or related phishing campaigns. Defenders should continue to block the domain at perimeter firewalls and DNS resolvers, consider sink‑holing the name, and monitor for any residual traffic to the underlying IP address. Additionally, organizations should advise users to disregard unsolicited communications referencing the domain or its URL pattern, and add the IP to threat‑feed watchlists. Ongoing surveillance of Wix‑hosted IP ranges is advisable, as adversaries may reuse this infrastructure for future phishing operations.