verizon[.]finokdg[.]cc

Analysis of the domain verizon.finokdg.cc indicates it was actively involved in brand impersonation targeting X.com, as documented on July 23, 2026. The domain, registered on February 21, 2026, through Gname.com Pte. Ltd., resolved to the IP address 104.21.0.156, hosted on Cloudflare's infrastructure (AS13335) in the United States. No SSL certificate was present, which is atypical for legitimate services and increases the risk of unencrypted data interception. The domain was flagged by 15 of 93 security vendors on VirusTotal, a detection rate consistent with phishing activity.

It also appeared on at least one security blocklist, specifically PhishDestroy, which classified it as a brand impersonation scam. The page title, 'Welcome to nginx!', suggests the use of a default or misconfigured web server, a common characteristic of hastily deployed phishing infrastructure. No further details about the exact content or functionality of the site are available, as the domain is currently offline and no archived captures or screenshots were provided for analysis. Infrastructure analysis reveals the domain used Cloudflare nameservers (kiki.ns.cloudflare.com and watson.ns.cloudflare.com), a tactic frequently employed to obscure hosting details and evade takedowns.

The Gridinsoft trust score of 0/100 further corroborates its malicious classification. While the domain is no longer resolving, defenders should monitor for re-activation or similar domains registered under the same pattern or registrar. Organizations should ensure their blocklists include this domain and consider proactive measures such as DNS filtering or endpoint protection rules to prevent access if the domain resurfaces. The absence of an SSL certificate and the use of Cloudflare hosting are notable red flags that should be incorporated into detection logic for future threat hunting.