casefb294190-nubc[.]vercel[.]app

Analysis of casefb294190-nubc.vercel.app indicates a high-risk phishing domain targeting user credentials, operational as of July 2026. The domain was registered on February 21, 2026, through Tucows Domains Inc. and is hosted on Amazon Web Services (AS16509) at IP 216.198.79.195, located in the United States. The site returned an HTTP 451 status (Unavailable for Legal Reasons) at the time of assessment, with a page title of 'Deployment Unavailable,' suggesting recent takedown or mitigation efforts. Security vendor detections on VirusTotal show 15 of 93 engines flagging the domain as malicious, while Google Safe Browsing classifies it as engaging in social engineering.

The domain appears on at least one security blocklist, specifically PhishDestroy. Infrastructure analysis reveals the use of Vercel hosting and HSTS enforcement, alongside an SSL certificate issued by Google Trust Services (WR1). While the exact phishing kit or targeted brand is not confirmed in available data, the domain structure and naming convention ('casefb') suggest a likely focus on Facebook credential harvesting. Defenders should treat this domain as compromised and prioritize blocking at network and endpoint levels.

Given the HTTP 451 status, the site may already be offline, but residual DNS or cached entries could persist. Monitoring for related subdomains or IP reuse under AS16509 is recommended. No visual or behavioral analysis of the phishing page is available; further forensic investigation would require access to historical captures or logs.