verizon[.]com-baw[.]com

The domain verizon.com-baw.com was registered on 21 February 2026 through Dominet (HK) Limited and is currently marked as taken offline. DNS resolution points to the Cloudflare‑owned address 172.67.165.117, which resides in the United States under ASN 13335. The domain uses Cloudflare’s infrastructure, advertising HTTP/3 support and presenting the default page title “Welcome to nginx!”. The TLS certificate is issued by Google Trust Services under the WE1 profile, indicating a valid HTTPS endpoint despite the site being offline.

Reputation checks show a Gridinsoft trust score of 0 / 100, and the domain appears on a single security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that 16 of 95 scanned security vendors flagged it as malicious. The primary malicious intent is identified as a brand‑impersonation campaign targeting the brand x.com. No additional malware kits, payloads, or credential‑harvesting pages have been observed in the limited data set.

Uncertainty remains around the specific content that was hosted before takedown, as the captured page title reveals only the generic nginx placeholder. No Safe Browsing or Open Threat Exchange entries are available for this domain, and the lack of public samples limits deeper behavioral analysis. Defenders should continue to monitor the associated IP address 172.67.165.117 for any re‑use, enforce blocklisting of the domain in perimeter security solutions, and consider adding the domain to internal deny lists for brand‑specific filters. Given the low trust score, the confirmed blocklist entry, and the multi‑vendor detection, the domain should be treated as high‑confidence malicious infrastructure despite its current offline status.