verizon[.]vgwe[.]cc

The domain verizon.vgwe.cc was registered on January 18 2026 through Gname.com Pte. Ltd. and is served by Cloudflare’s AS13335 network from the IP address 172.67.188.53, a location attributed to the United States. DNS resolution points to the authoritative nameservers A.SHARE-DNS.COM and B.SHARE-DNS.NET. No TLS certificate is presented; the HTTP response returns the default "Welcome to nginx!" page, indicating a bare web server without additional content.

Threat intelligence classifies the site as a brand impersonation targeting x.com, and the domain has been flagged by 16 of 95 security vendors on VirusTotal. It is listed on a single public blocklist and has been actively blocked by the PhishDestroy filtering service. The Gridinsoft trust score of 0 / 100 reinforces the assessment of malicious intent.

Current monitoring shows the domain taken offline, limiting further content analysis. Defenders should continue to block the hostname and its associated IP at perimeter defenses, update URL filtering rules, and monitor for any re‑activation or similar patterns using the same registrar or nameserver infrastructure. Given the lack of a valid SSL certificate and the generic nginx landing page, the exact payload or credential‑harvesting mechanism remains unknown, and additional investigation would be required if the site resurfaces.