vagamainnet[.]com

The domain vagamainnet.com was registered on 10 June 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted behind Cloudflare (AS13335). DNS resolution points to 172.67.174.11, located in the United States. The authoritative nameservers are dell.ns.cloudflare.com and ezra.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. TLS termination is provided by a Google Trust Services certificate issued to the WE1 organization, and the site advertises HSTS and HTTP/3 support. A security assessment shows the page title “VAGA Airdrop — Claim Portal | VagaChain Mainnet Migration”, matching the known “Fake Airdrop” kit. VirusTotal analysis recorded three positive detections out of 91 scanners, and the domain is listed on two public blocklists, including PhishDestroy and ScamSniffer. Independent scoring (Gridinsoft) assigns a trust score of 0 out of 100, reinforcing the malicious classification. The infrastructure appears fully operational, with an HTTP 200 response and active Cloudflare Browser Insights. No additional intelligence on payloads or credential harvesting mechanisms is publicly available. Defenders should treat vagamainnet.com as a high‑risk phishing vector, block network traffic to the domain and its resolving IP, and monitor for any related indicators such as the observed user‑agent strings or certificate fingerprints. Continuous observation is advised to detect possible changes in hosting or content.