verizon[.]com-edfj[.]cc

On July 23, 2026, threat analysts documented the domain verizon.com-edfj.cc as an elevated‑risk brand‑impersonation infrastructure targeting the x.com brand. The domain was registered on December 17, 2025 through Gname.com Pte. Ltd., and its authoritative name servers are listed as neil.ns.cloudflare.com and vida.ns.cloudflare.com, indicating reliance on Cloudflare’s DNS service. DNS resolution points to the IPv4 address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. No TLS certificate was presented during probing, and the HTTP response returned the generic page title “Welcome to nginx!”, suggesting the site was serving a default web server page rather than a crafted login portal.

VirusTotal has recorded 13 positive detections out of 95 scanned security vendors, and Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious classification. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that defensive networks have already taken mitigation steps. Current infrastructure status is reported as offline, limiting further behavioral observation. Evidence confirms that the domain’s primary intent is brand impersonation of x.com, leveraging the familiar “verizon.com” prefix to increase perceived legitimacy.

However, the exact content served, any credential‑harvesting mechanisms, and potential payloads remain unknown due to the site’s offline state and the lack of a presented SSL certificate. Defenders should add verizon.com-edfj.cc to URL filtering policies, block traffic to its resolving IP address 188.114.96.3, and monitor for related sub‑domains or future re‑hosting attempts under the same registrar or Cloudflare name‑server configuration. Continuous re‑scanning of the domain is advised in case it returns to service, enabling updated detection signatures based on any new artifacts that may emerge.