test123123-ndvj[.]vercel[.]app

PhishDestroy has identified test123123-ndvj.vercel.app as a generic phishing domain currently active and posing a high risk to users. The page title 'Пример' suggests a Russian-language lure, though no specific brand or drainer kit has been associated with this threat. The domain's purpose appears to be credential theft or malware distribution, targeting unsuspecting visitors.

Technical indicators reveal that this domain is flagged by 3 out of 95 security vendors on VirusTotal, and it appears on 2 security blocklists. The domain is registered through Tucows Domains Inc., with a creation date of February 21, 2026, indicating a very recent setup. It resolves to IP address 64.29.17.3 and uses an SSL certificate issued by Google Trust Services under the identifier WR1. These details collectively suggest a deliberately crafted malicious infrastructure.

As of the latest check, the domain remains active and accessible, meaning the threat is ongoing. Users are strongly advised not to visit the site, click any links, or provide any personal information. Organizations should block the domain at the network level and monitor for any related activity. While no immediate remediation has been applied, continued vigilance is recommended as the domain may evolve its attack methods.