verifiaction-9372[.]rest

The domain verifiaction-9372.rest is actively being used for a generic phishing campaign, as indicated by multiple independent security sources. The domain resolves to the IP address 104.21.56.85 and was registered on June 12, 2026 through Web Commerce Communications Ltd. Its authoritative name servers are ns100.webnic.cc and ns101.webnic.cc. Google Safe Browsing has flagged the domain for social engineering, and the domain appears on a single public blocklist where it is listed as blocked by PhishDestroy.

VirusTotal analysis shows that 14 of 91 scanned security vendors have flagged the domain, confirming a consensus of malicious intent among a subset of detection engines. The presence of these detections, combined with the recent creation date, suggests a short‑lived infrastructure typical of opportunistic phishing operators. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any specific brand being impersonated, leaving the exact content of the landing page unverified.

Defenders should prioritize adding verifiaction-9372.rest to DNS and proxy blocklists, monitor outbound connections for attempts to resolve or contact the IP 104.21.56.85, and enable real‑time Safe Browsing checks where possible. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is recommended to capture any evolution of the payload or additional detections. Given the high risk rating and active status, organizations should treat any traffic to this domain as malicious and enforce strict remediation procedures for affected endpoints.