confirmation-id77351[.]com

On July 29, 2026 the domain confirmation-id77351.com was observed in an active elevated‑risk phishing campaign. The domain was registered on June 12, 2026 through Atak Domain Bilgi Teknolojileri A.S. and currently resolves to the IP address 104.21.64.1. It appears on one security blocklist, identified as PhishDestroy, which has already flagged the host.

VirusTotal analysis shows that 15 of 91 scanning engines returned a malicious verdict, providing multi‑vendor confirmation of malicious intent. No additional data such as page title, SSL certificate details, or HTTP status codes has been published, so the exact content served by the site remains unverified. The IP belongs to a content‑delivery network that is frequently leveraged by malicious operators, suggesting a shared‑hosting infrastructure. Defenders should add confirmation-id77351.com to local deny lists, block outbound connections to 104.21.64.1, and monitor DNS logs for queries to the domain.

When feasible, retrieve the HTTP response in a sandboxed environment to confirm payload characteristics and enrich detection signatures. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is recommended, as additional vendors may flag the domain as new signatures emerge. Email filtering solutions should treat any messages referencing this domain as malicious and quarantine them. Until further analysis provides more context, the domain should be treated as a high‑confidence phishing indicator.