doc-mkvelinb[.]vercel[.]app

Analysis of the domain doc-mkvelinb.vercel.app indicates a high‑risk, active phishing operation. The site is hosted on Vercel, as shown by its registrar information, and the URL suffix ".vercel.app" confirms the use of Vercel’s serverless deployment platform. Google Safe Browsing has flagged the domain for social engineering, a classification that aligns with credential‑harvesting attempts. VirusTotal scans report that 10 out of 91 antivirus and URL‑reputation engines label the domain as malicious, providing independent corroboration of its threat status.

Independent phishing‑specific feeds have also taken action: PhishDestroy lists the domain as blocked, and it appears on one additional security blocklist, reinforcing the consensus that the site should be denied access. No public SSL/TLS certificate details, HTTP response codes, or page‑title metadata have been disclosed, so the exact content and visual appearance of the site remain unknown. Likewise, the specific brand or service being impersonated has not been identified in the available intelligence, limiting precise attribution.

Defenders should treat doc-mkvelinb.vercel.app as a malicious resource and enforce network‑level controls to block resolution and traffic to the host. Adding the domain to corporate URL filtering, DNS sinkhole, and endpoint protection rule sets will mitigate exposure. Continuous monitoring for any new indicators, such as changes in hosting IP or the appearance of additional detection signatures, is recommended to maintain situational awareness.