verizon[.]cdhty[.]icu

The domain verizon.cdhty.icu was registered on 2026-02-21 and is currently listed as offline. DNS resolution points to IP 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented a page title “Verizon Deals: Save on Phones, Internet, Accessories | Verizon,” suggesting a counterfeit e‑commerce offering. The domain is classified as a brand‑impersonation campaign targeting Amazon, despite the Verizon‑related title, indicating a possible cross‑brand lure.

Security telemetry shows the domain was blocked by PhishDestroy and appears on a single external blocklist. VirusTotal analysis recorded 15 of 93 scanning engines flagging the host as malicious, reinforcing the suspicion of malicious activity. The SSL certificate is identified as “WE1,” but no further validation details are provided. The current risk rating is elevated.

While the site is offline, the infrastructure—Cloudflare front‑end, the specific IP address, and the short‑lived registration—matches patterns observed in recent e‑commerce fraud operations. Defenders should continue to monitor the IP address for reuse, update URL filtering rules to include the fully qualified domain, and ensure that any inbound traffic to the host is blocked. Threat intelligence feeds that reference the domain should be refreshed, and organizations should be aware of potential phishing emails referencing the domain that may still be in circulation. Further analysis of HTTP response headers, certificate chain, and any captured network traffic would be required to close remaining gaps in the investigation.