confirm-address-check[.]vercel[.]app

PhishDestroy flagged confirm-address-check.vercel.app as a generic phishing domain masquerading as an address verification service. The domain shows no affiliation with legitimate parcel or government services, indicating a probable drainer kit targeting personal address data. No branded lure (FedEx, DHL, USPS, etc.) is visible at this time, suggesting a generic credential-harvesting lure designed for broad, low-effort phishing campaigns.

Technical indicators confirm the threat: VirusTotal returned 16 out of 95 detections at the time of analysis, the domain was registered via Vercel Inc., and resolves to IP 216.198.79.67. The SSL certificate is issued by Google Trust Services. The absence of a Google Safe Browsing (GSB) flag combined with zero blocklist entries suggests this campaign is still flying under detection radar, increasing the risk of successful user compromise.

This domain remains active under investigation; PhishDestroy has issued an immediate takedown request to Vercel and updated browser blocklists. While the current risk is elevated due to low detection coverage, proactive blocking and user caution reduce exposure. Remaining risk is moderate until the domain is fully sinkholed or taken down by the host.