vzwdscnt[.]com

Analysis of the domain vzwdscnt.com indicates it is actively engaged in phishing operations targeting Verizon customers, as suggested by the domain name and confirmed by Google Safe Browsing's classification of social engineering activity. The domain was registered on July 22, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, which is hosted on Cloudflare's network, as evidenced by the nameservers dorthy.ns.cloudflare.com and kipp.ns.cloudflare.com. Cloudflare hosting is commonly utilized by threat actors to obfuscate the true origin of malicious infrastructure and leverage the provider's DDoS protection and SSL capabilities.

As of July 26, 2026, the domain appears on a single security blocklist, specifically PhishDestroy, which suggests early detection but limited widespread visibility. Google Safe Browsing has flagged the domain for social engineering, reinforcing its classification as a phishing threat. While VirusTotal scans conducted by 91 vendors returned no detections, this absence does not confirm the domain's safety, as phishing domains often evade detection during initial deployment or through evasion techniques such as cloaking or geographic filtering. The domain remains active, and no additional details regarding the specific phishing kit, targeted brand elements, or exact content of the site are available at this time.

Defenders are advised to treat vzwdscnt.com as a high-risk domain and implement blocking measures at the DNS or network level. Monitoring for further detections on additional blocklists or threat intelligence platforms is recommended, as increased visibility may provide further context regarding the campaign's scope and objectives. Given the domain's recent registration and active status, continued vigilance is warranted to mitigate potential impacts on targeted users.