verizon[.]vtoifdk[.]cc

verizon.vtoifdk.cc is flagged as a brand‑impersonation infrastructure targeting the x.com brand. The domain was registered on 21 February 2026 through Gname.com Pte. Ltd. and uses the Cloudflare‑provided authoritative nameservers kehlani.ns.cloudflare.com and marek.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. No TLS certificate is presented; the site responds only over HTTP and returns the default nginx page title “Welcome to nginx!”, offering no direct evidence of brand‑specific content.

The Gridinsoft trust score of 0 / 100 classifies the domain as highly untrusted. VirusTotal reports that 15 of 95 security vendors label the domain as malicious, and the domain appears on one external blocklist. PhishDestroy has taken the domain offline, and its current status is listed as offline. The combination of a recent registration, lack of HTTPS, low trust score, multiple vendor detections, and a generic web server banner are consistent with a typical brand‑impersonation campaign.

However, the exact payload, credential‑harvesting mechanisms, or landing‑page structure have not been publicly disclosed, leaving the full attack vector uncertain. Defenders should add the domain and its resolving IP to URL filtering and firewall deny lists, monitor for any DNS queries to the associated Cloudflare nameservers, and enforce TLS‑only policies to prevent accidental HTTP connections. Continuous re‑evaluation is advised in case the domain is re‑activated or new indicators emerge.