verify-ordz[.]live

Analysis of verify-ordz.live indicates a high-risk credential phishing domain registered on July 9, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. As of July 19, 2026, the domain remains active and resolves to the IP address 188.114.96.3. VirusTotal telemetry shows 2 of 95 security vendors flagging this domain as malicious, though the specific detection context is not provided in available intelligence. The domain name structure suggests an attempt to mimic an order verification or authentication process, though no confirmed brand association or phishing kit has been identified at this time. The ten-day age of the domain aligns with common patterns observed in short-lived phishing infrastructure, where domains are rapidly stood up and discarded. Defenders should treat verify-ordz.live as an active threat and consider blocking resolution at the DNS level or monitoring for connections to 188.114.96.3. Further investigation is required to determine the exact credential harvesting mechanism, targeted platforms, or associated campaigns. No additional infrastructure links or historical patterns have been established in currently available data.