gateway[.]breezehost[.]xyz

The domain gateway.breezehost.xyz was registered on May 13, 2026 and is currently active. DNS resolution points to the Cloudflare‑provided address 188.114.97.3, and the authoritative nameservers are anahi.ns.cloudflare.com and fattouche.ns.cloudflare.com. The site presents an HTTP 200 response and serves a TLS certificate issued by Google Trust Services under the WE1 designation.

Infrastructure analysis shows that the domain is hosted behind Cloudflare’s CDN, with the IP geolocated to Canada and attributed to CloudFlare, Inc. The SSL certificate chain is valid, indicating the use of a reputable certificate authority. However, the domain receives a Gridinsoft trust score of 0 out of 100, reflecting a severe lack of confidence in its legitimacy. It is listed on a single security blocklist and has been explicitly blocked by PhishDestroy.

Threat evaluation focuses on the page title “Breeze Payment Gateway,” which mimics a legitimate payment interface and aligns with the classification of generic_phishing. VirusTotal reports six detections out of ninety‑five scanners, confirming that multiple security vendors have identified malicious characteristics. The combination of a fresh registration, high‑risk rating, low trust score, and observed phishing indicators supports the conclusion that the domain is being used to harvest credentials or financial information.

Defenders should immediately block gateway.breezehost.xyz at network perimeter and DNS resolvers, and add the IP 188.114.97.3 to any existing deny lists. Continuous monitoring of related subdomains and traffic patterns is advised, as the underlying Cloudflare infrastructure could be leveraged for additional malicious sites. End‑user education about the counterfeit “Breeze Payment Gateway” page and the importance of verifying URLs before entering sensitive data will help mitigate potential compromise.