121723398207[.]vercel[.]app

This domain, 121723398207.vercel.app, is actively impersonating Outlook as part of a credential phishing campaign. Analysis indicates the domain was registered on April 14, 2025, through Vercel Inc. and currently resolves to IP 216.198.79.131, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The page title 'Outlook Authentication' and the scam type 'Credential Phishing' explicitly confirm the target brand and attack method. The domain is flagged by 17 of 95 security vendors, appears on two blocklists (PhishDestroy, PhishingDB), and holds a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 0/100, reinforcing its malicious classification. Technical indicators include an SSL certificate issued by Google Trust Services (WR1), HSTS implementation, and Vercel hosting technology. The domain remains active with a 200 HTTP status, suggesting ongoing operational use. Defenders should prioritize blocking this domain at the DNS and web proxy layers, as well as monitoring for related subdomains or IPs within the same ASN. While the exact phishing kit or backend infrastructure is not yet analyzed, the combination of brand impersonation, low trust scores, and blocklist presence provides sufficient evidence for immediate mitigation. No legitimate use case is identified for this domain.