verizon[.]sfjkjla[.]icu

The domain verizon.sfjkjla.icu was registered on February 21, 2026 and is currently offline. Technical analysis shows it resolves to the IPv4 address 188.114.97.3, which belongs to Cloudflare’s AS13335 network and is geolocated in the United States. The domain is hosted on Cloudflare’s DNS infrastructure, using the authoritative nameservers rene.ns.cloudflare.com and treasure.ns.cloudflare.com. No TLS certificate is presented, and the HTTP response returns the default page title "Welcome to nginx!", indicating a generic web server without brand‑specific content.

Registration was performed through Gname.com Pte. Ltd., a registrar commonly used for disposable or short‑lived domains. The site is classified as a brand‑impersonation campaign targeting the brand x.com, as indicated by the supplied brand target field and the scam type label. Detection services have flagged the domain: fifteen of ninety‑three VirusTotal scanners reported it as malicious, and it appears on a single external blocklist. PhishDestroy has already added the domain to its blocklist, confirming that threat‑intelligence feeds are aware of the activity.

The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. Because the site is offline, direct interaction is not possible, but the infrastructure details remain relevant for correlation. Defenders should update perimeter and DNS filtering rules to block any future resolution of verizon.sfjkjla.icu, monitor Cloudflare‑associated IP ranges for similar patterns, and ensure that endpoint protection solutions incorporate the VirusTotal detection count. Continuous monitoring of the registrar Gname.com Pte. Ltd. for new domains that resolve to the same Cloudflare IPs is advised, as threat actors often reuse this hosting configuration for subsequent impersonation attempts.