verizon[.]com-edfb[.]cc

The domain verizon.com-edfb.cc was registered on December 17, 2025 through Gname.com Pte. Ltd. and is currently taken offline. Infrastructure analysis shows that the domain resolves to IP address 104.21.91.183, which belongs to AS13335 Cloudflare, Inc. in the United States. The authoritative nameservers are neil.ns.cloudflare.com and vida.ns.cloudflare.com, confirming that the hosting is provided via Cloudflare’s content delivery network. No SSL certificate was observed for the domain, meaning HTTP connections would be unencrypted.

The only visible HTTP response presented the generic page title "Welcome to nginx!", offering no indication of a legitimate service. Threat intelligence reports classify the site as a brand impersonation campaign targeting the brand x.com. VirusTotal scans recorded 14 detections out of 95 security vendors, suggesting a consensus among scanners that the domain is malicious. Additional security products have flagged the domain: PhishDestroy blocked it, and a single external blocklist lists it as malicious.

The Gridinsoft trust score of 0 out of 100 further reinforces the malicious assessment. Because the domain is presently offline, real‑time observation of its payload is not possible, and the exact phishing kit or page content remains unknown. Defenders should proactively block DNS resolution for verizon.com-edfb.cc, add the IP 104.21.91.183 to network deny lists, and monitor Cloudflare‑hosted IP ranges for similar impersonation attempts. Continuous re‑scanning of the domain, especially if it reappears, is recommended to capture any changes in payload or hosting configuration.