vnnz[.]lat

Analysis of vnnz.lat indicates it is an active generic phishing infrastructure observed as of the report date (August 07, 2026). The domain was registered on April 22, 2026 through Global Domain Group LLC and resolves to the IP address 104.21.78.76. VirusTotal has recorded detections from 13 of 91 security vendors, demonstrating that a minority of scanners have identified malicious behavior associated with the host. The domain is listed on one external blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a phishing resource.

No additional public intelligence such as Safe Browsing alerts, OTX mentions, SSL certificate details, HTTP response codes, or page‑title metadata is currently available, so the full scope of the payload and targeted brand cannot be confirmed. The limited detection footprint suggests that the site may be relatively new, consistent with its April registration, and that automated scanners have only partially indexed its content. Defenders should treat any traffic to vnnz.lat as hostile.

Network perimeter controls should deny or quarantine outbound connections to the IP 104.21.78.76, and DNS filtering should be updated to block the domain. Endpoint security solutions should be tuned to flag the 13 vendor detections reported by VirusTotal, and any observed attempts to resolve or contact the domain should be investigated as potential credential‑theft incidents. Continuous monitoring of blocklist feeds and VirusTotal updates is recommended to capture any escalation in detection rates or the appearance of additional indicators of compromise.