validarwsaccountweb[.]iceiy[.]com

PhishDestroy has identified validarwsaccountweb.iceiy.com as a credential phishing domain specifically designed to steal Microsoft Outlook login credentials. The page title, 'Outlook Verification,' is a common lure used by attackers to trick users into entering their email addresses and passwords, believing they are securing or verifying their accounts. This domain poses a significant risk to anyone who may have encountered it, as compromised credentials could lead to unauthorized access to sensitive emails, contacts, and other linked services.

Evidence gathered during the investigation is compelling. VirusTotal analysis shows that 17 out of 95 security vendors flag this domain as malicious, indicating broad industry recognition of its threat. The domain was registered through Porkbun LLC and created on April 18, 2026, which is a relatively recent registration date typical of phishing campaigns that operate for a short period before being taken down. It resolves to the IP address 185.27.134.221 and uses an SSL certificate from ZeroSSL, which can give a false sense of security to unsuspecting visitors. Additionally, the domain appears on one security blocklist, confirming its malicious nature. Fortunately, the domain is currently offline, meaning it is no longer accessible.

If you visited this domain and entered any information, you should immediately change your Outlook password and enable two-factor authentication if not already active. Monitor your account for suspicious activity, such as unrecognized sign-ins or emails sent from your account. It is also advisable to scan your device for malware, as phishing sites can sometimes deliver payloads. For further assistance, visit PhishDestroy's resources on credential theft response. Always verify the authenticity of login pages before entering credentials, especially when prompted by unsolicited emails or messages.