verizon[.]com-edfj[.]cc
“Welcome to nginx!”
Résumé des preuves
On July 23, 2026, threat analysts documented the domain verizon.com-edfj.cc as an elevated‑risk brand‑impersonation infrastructure targeting the x.com brand. The domain was registered on December 17, 2025 through Gname.com Pte. Ltd., and its authoritative name servers are listed as neil.ns.cloudflare.com and vida.ns.cloudflare.com, indicating reliance on Cloudflare’s DNS service. DNS resolution points to the IPv4 address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. No TLS certificate was presented during probing, and the HTTP response returned the generic page title “Welcome to nginx!”, suggesting the site was serving a default web server page rather than a crafted login portal.
VirusTotal has recorded 13 positive detections out of 95 scanned security vendors, and Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious classification. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that defensive networks have already taken mitigation steps. Current infrastructure status is reported as offline, limiting further behavioral observation. Evidence confirms that the domain’s primary intent is brand impersonation of x.com, leveraging the familiar “verizon.com” prefix to increase perceived legitimacy.
However, the exact content served, any credential‑harvesting mechanisms, and potential payloads remain unknown due to the site’s offline state and the lack of a presented SSL certificate. Defenders should add verizon.com-edfj.cc to URL filtering policies, block traffic to its resolving IP address 188.114.96.3, and monitor for related sub‑domains or future re‑hosting attempts under the same registrar or Cloudflare name‑server configuration. Continuous re‑scanning of the domain is advised in case it returns to service, enabling updated detection signatures based on any new artifacts that may emerge.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif