mua-personassvv[.]vercel[.]app

This domain, mua-personassvv.vercel.app, is flagged as a generic phishing site with elevated risk, currently offline as of July 23, 2026. Registered on February 21, 2026, through Tucows Domains Inc., the domain resolves to IP address 216.198.79.67, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The page title 'Deployment Unavailable' and HTTP status 451 suggest the site was either suspended or misconfigured at the time of assessment. Analysis indicates the domain was blocked by PhishDestroy and appears on at least one security blocklist.

Twelve of ninety-five security vendors on VirusTotal flagged the domain as malicious, though the specific payload or phishing kit remains unconfirmed. SSL certification is provided by Google Trust Services (WR1), a common feature in both legitimate and malicious deployments. Infrastructure analysis reveals the use of Vercel hosting, a platform frequently leveraged for rapid phishing site deployment due to its ease of use and free tier. The presence of HTTP Strict Transport Security (HSTS) headers does not mitigate the risk, as this is often enabled by default on Vercel deployments.

No brand or service impersonation is evident from the available data, and the exact phishing target (e.g., financial, corporate credentials, or personal data) is not yet determined. Defenders should treat this domain as compromised infrastructure and monitor for re-emergence under the same or similar Vercel subdomains. Network-level blocking of the resolved IP (216.198.79.67) and associated Vercel subdomains is recommended for proactive mitigation. Further investigation into the registrar’s abuse response and hosting provider’s takedown actions may provide additional context on the threat actor’s persistence.