comerciocenter[.]net

Analysis of the domain comerciocenter.net indicates that it is currently active and was registered on July 30, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 104.21.4.56 and is served by Cloudflare nameservers elma.ns.cloudflare.com and henry.ns.cloudflare.com. It appears on a single security blocklist and is specifically blocked by the PhishDestroy service, suggesting that threat‑intel feeds have identified it as a phishing source.

VirusTotal records show that the domain has been scanned by 91 antivirus and URL scanning engines; none of the vendors have raised a detection at the time of the scan, a fact that does not constitute a safety assurance given the limited detection history and the recent registration date. No public information about the site’s SSL certificate, HTTP response code, page title, or content has been released, leaving those aspects of the infrastructure unverified. The lack of additional contextual data, such as observed credential‑harvesting pages or confirmed victim reports, creates uncertainty around the exact phishing campaign scope and targeted brands.

Defenders should consider adding the domain to outbound filtering rules, monitoring DNS queries for the associated IP, and enforcing blocklists that include the identified security blocklist entry. Continuous re‑evaluation of VirusTotal and other sandbox results is recommended, as the detection landscape may evolve. Given the recent creation date and the confirmed blocklist presence, proactive containment is advised while additional telemetry is gathered.