verizon[.]vnijsabn[.]cc

This domain, verizon.vnijsabn.cc, was registered on 21 February 2026 and is presently marked as offline. Infrastructure analysis shows it resolves to the Cloudflare‑owned address 188.114.96.3, which is advertised as being located in the United States and is announced by ASN 13335. The SSL certificate presented for the host is identified as “WE1”, a detail that does not correspond to a trusted public‑trusted CA. Reputation signals are extremely poor: Gridinsoft assigns a trust score of 0 out of 100, the domain appears on one public security blocklist, and PhishDestroy has actively blocked it.

VirusTotal reports that 16 of 93 scanning engines label the domain as malicious, confirming a consensus of threat detection across multiple vendors. The available intelligence does not include a page title, brand‑targeting information, or a detailed payload description, so the exact phishing lure remains unknown. However, the combination of a recent registration, low‑trust SSL, Cloudflare front‑end hosting, and multi‑vendor detections aligns with the typical profile of a generic phishing infrastructure.

Defenders should immediately add verizon.vnijsabn.cc to URL filtering and DNS‑based blocklists, confirm that outbound traffic to 188.114.96.3 is denied, and monitor for any resurgence of the domain in future registrations. Continuous ingestion of feeds that reference PhishDestroy, Gridinsoft, and VirusTotal detections will help surface any re‑use of the same naming pattern. Because the site is already taken offline, investigators can also request historical snapshots from web‑archive services to aid attribution, but any active mitigation should assume the domain may be re‑activated by the threat actor.