dealiovzw[.]com

Analysis of the domain dealiovzw.com indicates it is an active phishing infrastructure targeting users with a Verizon-themed lure, as suggested by the domain name. Registered on August 01, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain currently resolves to the IP address 188.114.97.3. Infrastructure analysis reveals the use of Cloudflare nameservers (josephine.ns.cloudflare.com and piers.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedown efforts. As of August 05, 2026, the domain appears on one security blocklist, specifically PhishDestroy, though it has not been flagged by any of the 91 vendors that scanned it on VirusTotal.

The absence of detections in VirusTotal does not confirm the domain's safety, as phishing campaigns often evade initial scans through rapid deployment or obfuscation techniques. The domain's creation date aligns with recent phishing trends, where newly registered domains are frequently weaponized within days of registration. While the exact content of the site remains unanalyzed, the domain name suggests an intent to deceive users into believing it is affiliated with Verizon, a telecommunications provider.

Defenders should treat this domain as high-risk pending further investigation. Network administrators are advised to block traffic to and from 188.114.97.3 and monitor for connections to dealiovzw.com, particularly in environments where Verizon-related communications are common. Additional scrutiny of domains registered through NICENIC INTERNATIONAL GROUP CO., LIMITED may also be warranted, given its association with this active threat.