verizon[.]efdss[.]icu

The domain verizon.efdss.icu was registered on February 21, 2026 and is currently listed as offline. Infrastructure analysis shows it resolves to the IP address 188.114.96.3, which is hosted in the United States under Autonomous System AS13335 operated by Cloudflare, Inc. The site presented the page title "Verizon Deals: Save on Phones, Internet, Accessories | Verizon," suggesting an attempt to lure victims with a Verizon‑related offer while the underlying campaign explicitly targets the Amazon brand, as indicated by the impersonation flag. The scam is classified as an E‑Commerce scam, a common vector for credential harvesting and monetary fraud.

Reputation services provide consistent negative signals: Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser reports a score of 1 out of 100, both reflecting extreme distrust. The SSL certificate is identified as "WE1," offering no validation of legitimacy. Threat intelligence platforms have recorded the domain on a single security blocklist and it is actively blocked by PhishDestroy. VirusTotal scans show that ten of ninety‑three scanning engines flagged the domain, corroborating the malicious assessment.

Defenders should treat verizon.efdss.icu as a high‑confidence malicious indicator. Immediate actions include adding the domain and its resolved IP address to network deny lists, extending web filtering rules, and monitoring for any resurgence in DNS resolution. Although the site is offline, the underlying infrastructure—particularly the Cloudflare IP—may be reused for future campaigns, so continuous observation of the IP and related CNAME patterns is recommended. Where possible, threat hunters should query passive DNS feeds for historical mappings and correlate any observed traffic with credential‑theft or payment‑related anomalies. The current evidence does not provide a live payload or detailed page content, so further investigation is limited to the available metadata.