verizon[.]qxyer[.]icu

The domain verizon.qxyer.icu was registered on February 21 2026. DNS resolves to IP 188.114.97.3, which is owned by Cloudflare (AS13335) and geolocated in the United States. The hosting provider is a widely used CDN, often abused by malicious actors to hide origin. The site was observed offline at the time of analysis, and security tooling reports it as taken offline.

PhishDestroy has placed the domain on its blocklist, and it also appears on an additional security blocklist. VirusTotal scans show 12 of 93 AV engines flag the domain, indicating a measurable level of malicious confidence. The SSL certificate presented is identified as WE1, which is a low‑trust certificate commonly issued to short‑lived malicious sites. No public page title or brand targeting information is available in the current dataset, so the exact lure or impersonated brand cannot be confirmed.

Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑hosting of the same domain or IP, and consider adding the IP address 188.114.97.3 to threat‑intel feeds. Because the domain is offline, further dynamic analysis is not possible, and the threat actor may attempt to reactivate the domain or shift to a new one. Ongoing vigilance and correlation with other indicators of compromise are recommended.