verizon[.]com-bah[.]com

The domain verizon.com-bah.com was registered on February 21, 2026 through Dominet (HK) Limited and is currently taken offline. DNS resolution points to IP address 104.21.37.36, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Both authoritative nameservers are Cloudflare‑managed (dakota.ns.cloudflare.com and natasha.ns.cloudflare.com), confirming the use of Cloudflare’s edge infrastructure and the presence of HTTP/3 support. The site presented a generic page title of "Welcome to nginx!" and was served over TLS using a Google Trust Services / WE1 certificate, indicating a valid SSL chain but offering no brand‑specific content.

A Gridinsoft trust score of 0 out of 100 further underscores the malicious nature of the host. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis shows that 16 of 95 scanned security vendors flagged the domain, providing independent corroboration of its malicious reputation. The listed scam type is brand impersonation targeting the brand x.com, though the exact phishing kit or page content has not been publicly disclosed.

Defenders should continue to block the domain at perimeter filters, update DNS blocklists with the associated IP and nameserver entries, and monitor for any resurgence of the domain or related sub‑domains. Given the Cloudflare front‑end, threat actors may quickly redeploy the same IP range, so vigilance on Cloudflare‑originated traffic to the IP 104.21.37.36 is advised. Until the site is definitively taken down, any inbound connections to the domain should be treated as malicious and logged for further investigation.