damobell[.]vercel[.]app

Analysis of the domain damobell.vercel.app indicates it was operating as a generic phishing infrastructure before being taken offline. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolved to the IP address 64.29.17.131, hosted on Amazon.com, Inc. (AS16509) in the United States. At the time of assessment, the domain returned an HTTP 404 status with the page title '404: NOT_FOUND', suggesting either a decommissioned or inactive phishing page. The SSL certificate was issued by Google Trust Services (WR1), and HSTS was enforced, which may have been leveraged to lend an appearance of legitimacy to the malicious activity.

The domain appeared on one security blocklist and was flagged by 14 of 93 security vendors on VirusTotal, indicating detection by multiple threat intelligence sources. The specific target or brand impersonated by this phishing domain is not evident from the available data, as the page title and other observable indicators do not reference a known organization or service. Infrastructure analysis reveals the use of Vercel, a common platform for hosting both legitimate and malicious content, which may have facilitated rapid deployment and takedown of the phishing page. Defenders should treat this domain as part of a broader phishing campaign, particularly given its prior detection by security vendors and inclusion on blocklists.

While the domain is currently offline, historical resolution to 64.29.17.131 and its association with known phishing infrastructure warrant monitoring for reactivation or migration to alternative hosting. Network-level blocking of the domain and IP address is recommended for organizations seeking to prevent potential re-emergence of this threat. Additional context regarding the phishing kit or campaign affiliation is not available at this time.