2354573435254[.]vercel[.]app

Analysis indicates that the domain 2354573435254.vercel.app is actively involved in credential phishing operations as of July 12, 2026. The domain was registered on February 21, 2026, through Tucows Domains Inc. and currently resolves to the IP address 98.84.224.111, hosted on infrastructure belonging to Amazon.com, Inc. (AS14618) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 intermediate, a common configuration for legitimate and malicious domains alike. Infrastructure analysis reveals the use of Netlify and HTTP Strict Transport Security (HSTS), technologies often employed to enhance perceived legitimacy or evade basic security filters. Despite the page title displaying 'Site not found,' the domain returns an HTTP 200 status code, suggesting the presence of active content or a deliberate attempt to mislead automated detection systems. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and is flagged by 15 of 93 security vendors in aggregated threat intelligence feeds. The Gridinsoft trust score for this domain is 0/100, further corroborating its classification as high-risk. While the exact content of the phishing page remains unanalyzed, the available evidence confirms its role in credential harvesting. Defenders are advised to block the domain at the DNS or network level, monitor for connections to the associated IP address (98.84.224.111), and review logs for any prior interactions with this infrastructure. Given its continued activity, this domain should be treated as a persistent threat until decommissioned or further remediation is observed.