new36-3-1-766[.]vercel[.]app

This domain, new36-3-1-766.vercel.app, is a credential harvesting phishing site targeting enterprise and personal email users. The page title 'Web Mail' and infrastructure hosted on Vercel Inc. suggest an attempt to mimic legitimate webmail login portals, tricking users into submitting usernames, passwords, and potentially multi-factor authentication codes. The domain is designed to harvest sensitive authentication credentials for subsequent unauthorized access to email accounts, financial systems, or corporate networks. Analysis indicates the domain is flagged by 14 out of 95 security vendors on VirusTotal, including detections for phishing and malicious content. Infrastructure analysis reveals the domain resolves to the IP address 216.198.79.3, a host previously associated with phishing campaigns. The domain is registered through Vercel Inc., a platform commonly abused for rapid deployment of phishing pages due to its ease of use and free hosting options. Google Safe Browsing has also classified this domain as phishing, reinforcing its malicious intent. No legitimate creation date or historical context is available, further indicating its disposable nature for short-term attacks. Users who have visited new36-3-1-766.vercel.app or entered credentials on the site should immediately reset passwords for any accounts accessed from the same device or network. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access. Scan the device for malware, as phishing pages may deploy additional payloads. Report the incident to internal security teams or relevant authorities to support takedown efforts. Monitor financial and communication accounts for signs of compromise, such as unauthorized transactions or sent emails. Avoid reusing passwords across platforms to limit the impact of credential exposure.