verizon[.]viedcxh[.]cc

Analysis of the domain verizon.viedcxh.cc indicates it was a phishing site targeting Verizon customers, now offline as of July 23, 2026. The domain was registered on February 21, 2026, and resolved to the IP address 172.67.141.229, which is part of AS13335 (Cloudflare, Inc.) located in the United States. Infrastructure analysis reveals the use of Cloudflare hosting, a common tactic to obscure the true origin of phishing sites and leverage Cloudflare’s SSL certificates for perceived legitimacy. The SSL certificate for this domain was issued by WE1, a provider frequently used in low-effort phishing campaigns due to its accessibility and low cost. At the time of assessment, the domain was flagged by 13 of 93 security vendors on VirusTotal, a detection rate consistent with known phishing domains.

It also appeared on one security blocklist and was blocked by PhishDestroy, further corroborating its malicious classification. No additional details about the phishing kit, exact page content, or specific lures (e.g., account verification, billing alerts) are available, as the site is no longer accessible. The domain’s name, which includes 'verizon,' strongly suggests an intent to impersonate the telecommunications provider, though no direct evidence of the targeted brand’s involvement or takedown request is present in the available data. Defenders should treat this domain as confirmed malicious based on its detection history and infrastructure.

While the site is offline, organizations are advised to monitor for any re-registration or re-emergence under a similar domain pattern. Network-level blocking of the IP 172.67.141.229 may provide additional protection, though Cloudflare’s shared hosting environment means this IP could host other unrelated sites.