VirusTotal
18 / 89
“Deployment Unavailable”
On 2026-10-01, meta-verified-blueticks-fb12.vercel.app returned HTTP status 451, a recorded response code. The same domain appears in the publisher-owned PhishDestroy internal listing, dated 2026-09-13 as first observation.
VirusTotal recorded 18 detections across 89 scanners for meta-verified-blueticks-fb12.vercel.app on 2026-09-19. The SSL certificate scan on 2026-09-19 named Google Trust Services / WR1 as issuer. The domain resolves to 216.198.79.131, associated with Vercel, Inc in the US, and the PhishDestroy internal listing is marked true.
The HTTP 451 response describes only the reply recorded on 2026-10-01, not all content served by the domain. VirusTotal detections and the PhishDestroy listing are separate source observations with their own dates, so they cannot be merged into a single verdict or trend. The gap between first observation on 2026-09-13 and the later checks shows a sequence of dated records rather than a measured change.
For meta-verified-blueticks-fb12.vercel.app, preserve the HTTP 451 response record and the PhishDestroy internal listing as separate source records. Compare the VirusTotal detection record against later scans of the same domain to see whether scanner results shift. Retain the SSL certificate scan record alongside these for future reference.
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
VercelScanner note: dead_http: raw=http_451; http=451; via=https_proxy; server=Vercel; provider_error=DEPLOYMENT_DISABLED
Provider response during scan: DEPLOYMENT_DISABLED
Edge-IP reputation is not attributed to this domain.
Location describes the IP network.
8f46c4a0a289bfde4060d06986f2af761ee62d668dde972e6bef4687ee4f6093Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Select your country to get official cybercrime contacts, or create a complaint draft →.
Template-based draft · optional AI wording assistance requires separate consent
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowSubmit suspicious domains to our threat database — protect the community
ReportRecent phishing reports and observed availability changes
MonitorMonitor live threats or contest this listing if you believe it's a false positive