courierzy[.]com

Analysis of courierzy.com, observed on July 24, 2026, indicates a confirmed brand‑impersonation campaign. The domain was registered through NameCheap, Inc. on March 16, 2025 and currently resolves to the IPv4 address 198.12.66.123, which is allocated to AS36352 HostPapa in the United States. DNS resolution is handled by ns1.host-forest.com and ns2.host-forest.com. No Transport Layer Security certificate is presented for the site, leaving the connection unencrypted.

The page title returned by the live endpoint reads "courierzy | Logistics | Cargo Company," suggesting an attempt to masquerade as a logistics provider, though the exact target brand is not disclosed in the available intelligence. Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of credibility. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal reporting shows that 1 out of 95 scanned security vendors flagged the domain, providing limited but corroborating evidence of malicious intent.

The site is presently taken offline, limiting immediate exposure, yet the infrastructure details remain useful for threat‑intel correlation. Defenders should continue to monitor the associated IP address and name‑server pair for re‑activation, incorporate the domain and its IP into sink‑hole or blocklist feeds, and flag any future resolution attempts as suspicious. Additional investigation is needed to map any downstream command‑and‑control infrastructure or credential‑harvesting components that may be linked to this domain, as current evidence is limited to registration and hosting attributes.