supreme-tribble-nine[.]vercel[.]app

Analysis of the domain supreme-tribble-nine.vercel.app indicates it was a generic phishing page hosted on Vercel infrastructure. The domain, registered through Tucows Domains Inc. on February 21, 2026, resolved to the IP address 64.29.17.67, which is part of Amazon.com, Inc.'s AS16509 network located in the United States. At the time of assessment on July 24, 2026, the domain returned an HTTP 451 status, typically associated with content unavailability for legal reasons, and displayed the page title 'Deployment Unavailable.' This suggests the hosting provider or registrar may have taken action to disable the deployment. The domain was flagged by 13 of 93 security vendors on VirusTotal, and it appeared on at least one security blocklist, specifically PhishDestroy.

The SSL certificate was issued by Google Trust Services (WR1), a common certificate authority that does not inherently indicate malicious intent but is frequently used by threat actors due to its accessibility. The presence of HSTS (HTTP Strict Transport Security) headers was detected, which may have been configured to lend an appearance of legitimacy or to enforce encrypted connections for phishing purposes. No specific brand or scam category was identified in the available data, and the exact content of the phishing page remains unanalyzed.

The domain is currently offline, reducing immediate risk, but defenders should treat any prior connections to this domain as potential indicators of compromise. Network logs should be reviewed for interactions with 64.29.17.67 or the domain itself, particularly between its creation date and takedown. Given the use of Vercel hosting, organizations may also consider monitoring for similar subdomains under vercel.app that exhibit comparable patterns, such as unusual project names or sudden traffic spikes.