verizon[.]pointsff[.]com

Analysis indicates that verizon.pointsff.com was registered on 21 February 2026 through Dominet (HK) Limited and resolves to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. The server returns HTTP 200 with the generic title “Welcome to nginx!” and does not present an SSL certificate, meaning the site is only reachable over clear‑text HTTP. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal scans show 15 of 93 vendors flag the domain as malicious, and Gridinsoft assigns a trust score of 0 / 100. The domain is associated with a brand‑impersonation campaign targeting x.com, as indicated by the intelligence tag “Impersonates: x.com” and the scam type “Brand Impersonation”. Nameserver records point to ns1.fbi.seized.gov and ns2.fbi.seized.gov, which are atypical and may suggest an attempt to obscure hosting details. The infrastructure is otherwise typical of a Cloudflare‑fronted site, providing no further distinguishing characteristics. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms because no page content beyond the title has been captured. Defenders should add 188.114.97.3 to outbound and inbound block lists, enforce TLS‑only policies to prevent accidental HTTP connections, and monitor DNS queries for verizon.pointsff.com. Updating IDS/IPS signatures with the domain and associated host header patterns is recommended, as is sharing the indicator set with threat‑intel platforms to improve collective detection.