stream-chrome-azure[.]vercel[.]app

Analysis of stream-chrome-azure.vercel.app performed on July 24, 2026 indicates that the domain was created on February 23, 2026 and is currently taken offline, returning an HTTP 404 status with the page title “404: NOT_FOUND”. The domain resolves to IP address 216.198.79.131, which belongs to the Amazon.com, Inc. network (AS16509) and is geolocated in the United States. The SSL certificate presented is issued by Google Trust Services under the WR1 label, and the site enforces HTTP Strict Transport Security (HSTS).

Registration was handled through Tucows Domains Inc., a well‑known registrar. The domain has been observed on three security blocklists—PhishDestroy, MetaMask, and SEAL—each labeling it as malicious, and it appears in generic threat intelligence feeds as a generic phishing indicator. VirusTotal scanned the domain with 93 vendor engines but reported no detections; this absence of detections does not constitute evidence of safety, especially given the blocklist listings and the 404 response that may conceal a transient phishing payload.

No additional artifacts such as malicious scripts, credential‑harvesting forms, or redirects were captured during the brief observation, leaving the exact phishing campaign details unknown. Defenders should continue to block the domain at perimeter and endpoint layers, monitor for any re‑activation or content changes, and consider adding the IP address to threat‑intel watchlists. Ongoing collection of DNS and TLS metadata is advised to detect potential repurposing of the underlying Vercel infrastructure for future malicious activity.