verizon[.]vlodo[.]cc

On July 23, 2026, the domain verizon.vlodo.cc was observed to be offline but remains listed as a brand‑impersonation vector targeting x.com. The site returned the generic HTTP title “Welcome to nginx!” and did not present an SSL certificate, indicating an unencrypted HTTP service. Registration data shows the domain was created on 21 February 2026 through Gname.com Pte. Ltd., and the authoritative nameservers are lee.ns.cloudflare.com and virginia.ns.cloudflare.com, both belonging to Cloudflare. DNS resolution points to 104.21.46.106, an address owned by AS13335 Cloudflare, Inc. in the United States.

Threat‑intelligence feeds have placed the domain on one security blocklist and it is currently blocked by the PhishDestroy service. The Gridinsoft trust score is 0 out of 100, reflecting a uniformly negative assessment. VirusTotal analysis shows that 16 of 93 scanned vendors flagged the domain as malicious, reinforcing the suspicion of malicious intent. The combination of a recent registration, lack of TLS, generic server banner, and multiple vendor detections aligns with typical infrastructure used for brand‑impersonation campaigns.

Uncertainty remains around the exact payload or credential‑harvesting mechanisms, as no page content beyond the title has been captured. Defenders should continue to block the domain at network perimeter controls, update URL filtering lists, and monitor for any resurgence of the domain or associated IP address. Given the Cloudflare hosting, threat hunters may also consider inspecting other subdomains under the same IP range for similar patterns. Ongoing vigilance is advised, especially for users of the targeted x.com service, to prevent potential credential compromise.