confirmation-id7432[.]com

Analysis of confirmation-id7432.com indicates that the domain is actively used for credential harvesting. The domain was registered on June 12, 2026 through Hello Internet Corp and resolves to the IP address 104.21.43.223. Independent threat‑intelligence feeds have placed the domain on three security blocklists and it is currently blocked by the PhishDestroy, MetaMask, and SEAL filters, confirming its malicious reputation.

VirusTotal scans show that 14 of 91 security vendors flag the domain, reinforcing the high‑risk assessment. No additional data on SSL certificates, HTTP response codes, page titles, or content hashes is available, so the exact landing page behavior remains unknown. The observed evidence—registration details, IP resolution, blocklist presence, and multi‑vendor detection—provides sufficient confidence for defensive actions.

Network defenders should add the domain and its resolving IP to blocklists, enforce DNS‑level denial, and monitor outbound traffic for connections to 104.21.43.223. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are recommended to capture any changes in the domain’s infrastructure or detection profile.