verizon[.]txhuisn[.]cc

This domain, verizon.txhuisn.cc, is flagged as a brand impersonation threat targeting x.com, with elevated risk indicators confirmed through infrastructure analysis. Registered on February 21, 2026, via Gname.com Pte. Ltd., the domain resolves to IP 188.114.96.3, hosted on Cloudflare’s network (AS13335) in the United States. The nameservers, dolly.ns.cloudflare.com and keenan.ns.cloudflare.com, further link the domain to Cloudflare’s infrastructure, a common pattern in phishing campaigns leveraging the provider’s services for anonymity and resilience. No SSL certificate is present, increasing the likelihood of unencrypted malicious activity.

The domain’s HTTP response displays the default 'Welcome to nginx!' page title, suggesting either a placeholder or misconfigured deployment, though this does not rule out malicious intent. Detection by 13 of 95 security vendors on VirusTotal, alongside a listing on PhishDestroy’s blocklist, corroborates its classification as a phishing domain. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk assessment.

While the domain is currently offline, defenders should treat it as a confirmed threat vector for brand impersonation. Monitoring for re-emergence on the same IP or nameserver infrastructure is recommended, alongside proactive blocking of the domain and associated IP in enterprise security controls. The absence of additional context—such as the specific phishing kit or lure type—limits further attribution, but the observable evidence aligns with known brand impersonation tactics targeting social media or financial services.