reward-delegate[.]vercel[.]app

Analysis of reward-delegate.vercel.app shows a malicious infrastructure designed to deliver a fake airdrop scheme. The domain is registered through Vercel Inc. and is hosted on a Vercel‑provided IP address 216.198.79.195, which belongs to Amazon.com, Inc. (AS16509) in the United States. DNS queries return no nameserver records, indicating a possible misconfiguration or intentional omission. The site presented the page title "Home | DappsConnector," suggesting an attempt to associate the page with the DappsConnector brand, a known crypto‑related service, consistent with the classified scam type of a "Fake Airdrop." TLS termination is provided by Google Trust Services under the WR1 certificate, and HTTP Strict Transport Security (HSTS) is enabled, confirming the use of modern security headers despite the malicious intent.

HTTP responses report status code 451, meaning the resource is unavailable for legal reasons; the current status is recorded as taken offline. The domain appears on a single security blocklist, PhishDestroy, and has been flagged by 13 of 95 security vendors on VirusTotal, demonstrating a measurable detection consensus. No additional blocklist entries, Safe Browsing alerts, or Open Threat Exchange (OTX) references are present in the available intelligence.

Defenders should continue to block reward-delegate.vercel.app at network perimeter, update DNS sinkhole configurations, and monitor for other Vercel‑hosted domains that reference DappsConnector or airdrop terminology. Because content beyond the page title has not been captured, further investigation is needed to determine whether credential‑harvesting forms or additional payloads were ever delivered. Until the site is fully remediated, caution is advised when encountering similar Vercel‑based URLs that reference crypto airdrops.