vzwsnagit[.]com

This domain is flagged as a high-risk generic phishing threat and remains active as of July 26, 2026. Google Safe Browsing categorizes it as social engineering, and it appears on one security blocklist, PhishDestroy. VirusTotal reports 2 of 91 security vendors flagging the domain, indicating some but not broad detection. The domain was registered on July 22, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with low-effort or bulk registrations.

It resolves to IP address 104.21.74.130, which is within Cloudflare's hosting range, and its nameservers are dorthy.ns.cloudflare.com and kipp.ns.cloudflare.com. The IP address and nameservers are legitimate infrastructure but are commonly used by both benign and malicious sites, so this is not a strong indicator of safety. The domain's very recent creation date, combined with the Safe Browsing flag and blocklist presence, suggests it was set up specifically for phishing. The exact page content has not yet been analyzed, so it is unknown whether the site targets a specific brand or is a generic credential harvester.

Defenders should block this domain at the network or email gateway level, monitor for any associated subdomains or IP changes, and consider adding the domain to internal threat intelligence feeds. Users encountering vzwsnagit.com should be warned not to enter any personal information. Given the high-risk rating and active status, immediate action is recommended to prevent potential credential theft or social engineering attacks.