sui-ppv[.]vercel[.]app

Analysis as of August 07, 2026 indicates that the domain sui-ppv.vercel.app is actively hosting a generic phishing operation. Google Safe Browsing has flagged the domain for social engineering, confirming that the URL is used to lure users into credential theft. VirusTotal scans show that nine of ninety‑one security vendors have identified malicious behavior, reinforcing the suspicion. The domain is listed on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, demonstrating consensus among multiple mitigation services.

Network resolution points to the IP address 216.198.79.3, which is associated with the Vercel hosting platform; no further attribution such as ASN or geographic location is provided in the current data set. The domain’s registration details, page title, SSL certificate information, and HTTP response codes have not been disclosed, leaving those vectors unverified. Given the convergence of Safe Browsing, multiple vendor detections, and blocklist listings, the risk rating is high and the domain should be treated as a confirmed phishing threat.

Defenders are advised to add sui-ppv.vercel.app to deny‑list rules across DNS filtering, proxy, and endpoint protection solutions. Continuous monitoring of the IP address 216.198.79.3 for additional malicious activity is recommended, as is periodic re‑scanning with VirusTotal and other sandbox services to capture any evolution in payload or technique. Organizations should also educate users about the possibility of social engineering attempts originating from short‑lived Vercel subdomains, and enforce multi‑factor authentication to mitigate credential compromise.