verizon[.]com-baz[.]com

This domain, verizon.com-baz.com, is confirmed to be a brand impersonation threat targeting x.com. The site aims to deceive users by mimicking the legitimate x.com brand, potentially leading to unauthorized access to personal or financial information and other malicious activities. The domain's offline status and presence on security blocklists indicate a concerted effort to engage in deceptive practices, which may have been temporarily thwarted but could re-emerge.

Infrastructure analysis reveals that the domain verizon.com-baz.com resolves to the IP address 172.67.166.217, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain was registered through Dominet (HK) Limited on February 21, 2026, and has been flagged by 17 out of 95 security vendors on VirusTotal. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy, further confirming its malicious nature. The SSL certificate is issued by Google Trust Services / WE1, which can give a false sense of security to unsuspecting users.

If users have visited verizon.com-baz.com, they should immediately check their x.com account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) for all affected accounts. Users should also monitor their financial statements and credit reports for any signs of fraud. Reporting the incident to the x.com security team and to local cybersecurity authorities is advised to ensure a comprehensive response to the threat.