009090334mn[.]vercel[.]app

This domain, 009090334mn.vercel.app, is actively flagged as a high-risk phishing site targeting webmail users. Infrastructure analysis reveals it is hosted on Vercel's platform, resolving to IP address 64.29.17.195, located in the United States under Vercel, Inc. The domain presents a page titled 'Web Mail,' indicating an attempt to mimic legitimate email login portals. Google Safe Browsing has classified this domain under social engineering, and it appears on at least one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Google Trust Services, which does not inherently indicate malicious intent but is commonly used by both legitimate and fraudulent sites. As of July 19, 2026, the domain remains active and returns an HTTP 200 status, suggesting the phishing page is operational. VirusTotal reports that 21 out of 91 security vendors have flagged this domain, providing further evidence of its malicious nature. The exact brand or service being impersonated beyond the generic 'Web Mail' title is not confirmed in available data, and no specific phishing kit or additional threat indicators are currently linked to this domain. Defenders should prioritize blocking this domain at the network level, particularly in environments where webmail access is critical. Security teams are advised to monitor for credential harvesting attempts originating from this domain and to alert users who may have interacted with it. Given its active status and clear phishing indicators, immediate containment actions are recommended.