verizon[.]fxcast[.]icu

The domain verizon.fxcast.icu has been identified as a brand impersonation threat specifically targeting X.com. This domain is currently offline, but its malicious intent is clear from its registration details and security flags. The domain was created on December 30, 2025, and was registered through Aceville Pte. Ltd., a registrar often associated with suspicious domains. It resolved to IP address 104.21.57.119 and had an SSL certificate issued by Google Trust Services under the WE1 certificate authority. The page title displayed was 'Welcome to nginx!', which is a generic placeholder often used by attackers to host phishing pages.

Security analysis reveals that this domain appears on one security blocklist and has been flagged by 19 out of 95 VirusTotal vendors as malicious. This high detection rate indicates strong consensus among security vendors that the domain is dangerous. The domain's registration through Aceville Pte. Ltd. and its recent creation date are additional red flags commonly associated with phishing campaigns. The domain impersonates X.com, a major social media platform, suggesting that the attackers aimed to steal login credentials or deploy a crypto drainer.

Given that verizon.fxcast.icu is currently offline, the immediate threat is mitigated, but users should remain vigilant as similar domains may appear. PhishDestroy recommends that users never enter credentials on domains that impersonate trusted brands, even if they appear offline. Users who may have interacted with this domain should change their passwords immediately and enable two-factor authentication on their accounts. For ongoing protection, rely on PhishDestroy's real-time domain verification tool before entering sensitive information on any website.