join-whatsapp-group-khaki[.]vercel[.]app

PhishDestroy identifies an active WhatsApp group-themed phishing domain targeting unsuspecting users. The domain join-whatsapp-group-khaki.vercel.app leverages a credible Vercel.app subdomain structure to deceive victims into believing it is an official WhatsApp communication platform. This threat is classified as a generic phishing attack designed to harvest credentials or distribute malware under the guise of joining WhatsApp groups. The domain currently exhibits elevated risk potential and remains actively accessible as of the latest analysis.

Technical analysis reveals this domain was flagged by 15 of 95 VirusTotal security vendors, indicating partial but concerning detection coverage. Registered through Vercel Inc., the domain resolves to IP address 216.198.79.67 and is associated with a Google Trust Services SSL certificate, which may further enhance its perceived legitimacy. Additionally, this domain appears on 1 security blocklist, including the OpenPhish blocklist, reinforcing its malicious classification. These factors collectively underscore the domain’s elevated risk profile and the need for immediate caution among users.

Currently, this domain remains active and poses a credible threat to individuals seeking to join WhatsApp groups. PhishDestroy recommends users avoid interacting with join-whatsapp-group-khaki.vercel.app entirely and verify any WhatsApp-related communications through official channels. If accidental exposure occurs, users should immediately change passwords, enable multi-factor authentication, and scan devices for potential malware. Security teams and end-users are urged to report this domain to relevant authorities and blocklist maintainers to prevent further victimization. Proactive monitoring of similar domains registered under vercel.app is strongly advised to mitigate ongoing risks.