new-ad-resolving-xi3g[.]vercel[.]app

On August 03, 2026, analysis of the domain new-ad-resolving-xi3g.vercel.app identified it as an active phishing infrastructure. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing vendor has flagged the host as malicious. No additional public intelligence—such as registration details, hosting IP, ASN, geographic location, SSL certificate information, HTTP response codes, or Safe Browsing verdicts—has been published for the domain at this time. The page title and any brand‑targeting metadata have not been disclosed, and no open‑source intelligence sources have reported detections for this host.

Consequently, the precise attack vector, credential‑stealing methodology, or victim profile remains unknown. The absence of publicly available WHOIS data impedes attribution, and the lack of SSL/TLS fingerprint prevents certificate‑based blocking. Defenders should add the domain to internal block lists, monitor DNS queries for resolution attempts, and enforce outbound filtering that denies traffic to new-ad-resolving-xi3g.vercel.app. Network‑level controls, such as proxy or firewall rules, can mitigate exposure while further investigation gathers additional context, including registrar records, hosting provider information, and SSL certificate analysis.

Organizations that employ email security gateways should also ensure that URLs pointing to this domain are quarantined or rewritten. Implement DNS sinkholing or response‑policy‑zone (RPZ) rules for the domain, and consider leveraging threat‑intel feeds that include PhishDestroy entries. Ongoing observation for any emergence of additional indicators—such as related subdomains, payload hashes, or phishing kit signatures—is recommended to refine detection signatures and fully assess the threat landscape associated with this infrastructure.