free-credit-ads[.]vercel[.]app

Analysis of the domain free-credit-ads.vercel.app indicates it was actively involved in a generic phishing campaign targeting credit-related services, as suggested by its subdomain naming convention. The domain was registered on February 21, 2026, through Tucows Domains Inc. and resolved to the IP address 216.198.79.3, hosted under Amazon.com, Inc. (AS16509) in the United States. The SSL certificate was issued by Google Trust Services (WR1), a common provider for both legitimate and malicious domains, offering no definitive indication of intent on its own. Infrastructure analysis reveals the domain was deployed on Vercel, a platform frequently utilized for rapid hosting of both benign and malicious content.

The presence of HTTP Strict Transport Security (HSTS) suggests an attempt to appear legitimate, though this header is not exclusive to trusted sites. At the time of assessment, the domain returned an HTTP 451 status code, indicating it was taken offline or restricted, and the page title displayed 'Deployment Unavailable.' This status aligns with its current offline state, as confirmed by its appearance on one security blocklist and its detection by 14 of 93 security vendors on VirusTotal, signaling elevated risk. The exact content and mechanics of the phishing operation remain unconfirmed due to the domain's offline status. However, the subdomain 'free-credit-ads' strongly implies an attempt to deceive users with fraudulent credit offers or financial incentives.

Defenders are advised to treat this domain as malicious and update blocklists accordingly. Network administrators should monitor for connections to 216.198.79.3 and review logs for prior interactions with free-credit-ads.vercel.app. Given its registration date and detection history, this domain may re-emerge under similar naming schemes or infrastructure, warranting continued vigilance.