listed-livegrabs19[.]vercel[.]app

The domain listed-livegrabs19.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. and is hosted on Amazon’s AS16509 network (IP 64.29.17.3, United States). The site resolves to a Vercel‑hosted instance protected by HSTS and presents an SSL certificate issued by Google Trust Services under the WR1 designation. An HTTP request returns status 451 and the page title “Deployment Unavailable”, indicating the service has been taken offline.

VirusTotal analysis shows that 14 of 93 scanning engines flagged the host as malicious, and the domain appears on four independent blocklists, including PhishDestroy, Polkadot, Enkrypt and Codeesura. The combination of recent registration, cloud‑based hosting, a valid certificate, and multi‑vendor detection aligns with patterns observed in credential‑harvesting campaigns that exploit short‑lived Vercel deployments. At present no additional content has been captured, and the offline state prevents direct verification of phishing payloads or targeted brands.

Nonetheless, the detection footprint suggests the domain was used for a phishing operation before being withdrawn. Defenders should continue to block the domain at perimeter filters, monitor for any re‑activation of the same host or similar Vercel sub‑domains, and correlate inbound traffic logs for attempts to resolve the IP address 64.29.17.3. Threat‑intel feeds that reference the four blocklists should be updated to reflect the high‑risk rating, and incident response teams should treat any credential submissions to this domain as compromised.