verizon[.]com-afc[.]com

This domain is flagged as an elevated-risk credential harvesting site specifically targeting users of X.com through brand impersonation techniques. Analysis indicates the infrastructure was designed to deceive victims into submitting authentication credentials, likely via a spoofed login portal or phishing form. Infrastructure analysis reveals the domain verizon.com-afc.com was registered on December 16, 2025, through Dominet (HK) Limited. It resolves to IP address 172.67.208.53, hosted on Cloudflare's network (AS13335). The domain currently lacks an SSL certificate and displays the default page title 'Welcome to nginx!' VirusTotal detection shows 17 of 95 security vendors flagging the domain as malicious. It appears on one security blocklist and was previously blocked by enterprise-grade filtering systems. The domain's creation date suggests recent deployment, aligning with typical phishing campaign timelines. Mitigation requires immediate blocking of the domain and its resolving IP across all network security controls. Security teams should prioritize credential reset procedures for any users who may have interacted with the domain, particularly those with X.com accounts. Network administrators should monitor for connections to 172.67.208.53 and implement DNS sinkholing for verizon.com-afc.com. Given the domain's use of Cloudflare infrastructure, additional scrutiny of similarly hosted domains is recommended to identify potential campaign expansion. User awareness training should emphasize verification of domain legitimacy before credential submission, particularly for social media platforms.