vzndeals[.]com

The domain vzndeals.com was registered on July 20 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP 188.114.96.3 and uses Cloudflare nameservers jacob.ns.cloudflare.com and meiling.ns.cloudflare.com. As of July 26 2026 the domain remains active. VirusTotal records a single positive detection out of 91 security vendors, indicating at least one vendor flagged the site as malicious.

The domain appears on one external security blocklist and is listed as blocked by PhishDestroy. No additional public reputation scores, SSL certificate details, or HTTP response codes are available in the current intelligence set. The limited detection footprint suggests the site may be newly deployed, but the presence of a vendor detection and blocklist listing confirms malicious intent consistent with the generic phishing classification. Defenders should block traffic to vzndeals.com at the network perimeter, add the IP address 188.114.96.3 to host‑based deny lists, and monitor DNS queries for the associated Cloudflare name servers.

Continuous re‑scanning on VirusTotal and other sandbox services is recommended to capture any evolving payloads. Because the site is newly created, threat hunting should include correlation of recent credential‑theft incidents with outbound connections to the listed IP. Until further forensic artefacts are obtained, the domain should be treated as high‑risk and included in phishing mitigation rules.