# verizon.com-bai.com — MALICIOUS

> verizon.com-bai.com hosts a high-risk crypto drainer phishing scheme. Avoid interacting and ensure your devices are secure.

## Summary
PhishDestroy identifies verizon.com-bai.com as a high-risk phishing domain linked to crypto drainer activities. The domain masquerades under a trusted brand to deceive users.

Technical indicators include registration via Dominet (HK) Limited, a creation date in the future (2026-02-21), and resolution to IP 104.21.50.215. It is flagged by 14 out of 95 security vendors and appears on one security blocklist. The landing page currently displays a generic nginx welcome message.

This domain has been taken offline to prevent further harm. Users are advised to avoid the URL and verify device integrity if exposure is suspected.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Welcome to nginx!

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2027-01-17 00:00:00
- Registrar: Dominet (HK) Limited
- Country: HK
- IP: 104.21.50.215
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["arvind.ns.cloudflare.com", "rosemary.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Cluster25", "CRDF", "CyRadar", "ESET", "Fortinet", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019be048-cd62-721f-a38e-d0ada2f736a8.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/c57518b5-8fa3-49a6-99bb-1b03a4d89f17
- Wayback Machine: https://web.archive.org/web/https://verizon.com-bai.com
- PhishDestroy: https://phishdestroy.io/domain/verizon.com-bai.com/
- LLM endpoint: https://phishdestroy.io/domain/verizon.com-bai.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/verizon.com-bai.com/
Last updated: 2026-03-19