vercel7c0d7509f3a41bdd[.]vercel[.]app

This domain is flagged as a high-risk generic phishing site designed to harvest user credentials through fake account verification prompts. Victims are typically redirected from compromised ads, social media links, or malicious email campaigns, where they encounter realistic but fraudulent login interfaces mimicking legitimate services. The goal is to capture usernames, passwords, and potentially multi-factor authentication codes for unauthorized account access or financial fraud. Analysis indicates the domain was created on May 02, 2026, and is hosted on infrastructure provided by Vercel, resolving to the IP address 64.29.17.67. As of the latest scan, 17 out of 95 security vendors on VirusTotal have detected this domain as malicious, while it appears on one additional security blocklist. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. The domain remains active and unmitigated at the time of this report. If you visited vercel7c0d7509f3a41bdd.vercel.app or entered any credentials, immediately disconnect from the site and terminate any active sessions. Change passwords for all accounts accessed from the same device or network, prioritizing email, financial, and social media platforms. Enable multi-factor authentication where available, using app-based or hardware tokens instead of SMS. Scan the device for malware using updated security tools, and monitor accounts for unauthorized activity. Report the incident to relevant fraud teams and consider placing a fraud alert on credit files if financial information was exposed.