casefb480777-qhn9[.]vercel[.]app

The domain casefb480777-qhn9.vercel.app was created on February 21, 2026 and is hosted on Amazon’s AS16509 network, resolving to the IPv4 address 64.29.17.131 located in the United States. The site presents the HTTP status code 451 and the page title "Deployment Unavailable," indicating that the underlying Vercel deployment has been taken offline. The SSL certificate is issued by Google Trust Services under the WR1 issuer, confirming the use of a valid TLS chain. Infrastructure fingerprints show the presence of Vercel services and HTTP Strict Transport Security (HSTS) enforcement.

Security telemetry shows the domain appears on a single blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis reports that 11 of 93 scanned security vendors flagged the domain, reinforcing the suspicion of malicious use. The registrar listed is Tucows Domains Inc., a common registrar for newly created domains used in abuse campaigns. While the current HTTP response indicates the deployment is unavailable, the historical evidence—blocklist inclusion, vendor detections, and the page title—supports classification as a generic phishing infrastructure.

No additional content or payload details have been captured, leaving the exact phishing lure or targeted brand unknown. Defenders should continue to block the domain at perimeter and DNS filtering layers, add the IP address 64.29.17.131 to host‑based deny lists, and monitor for any re‑activation of the Vercel deployment. Ongoing observation of VirusTotal and blocklist updates is recommended to capture any future changes in detection status.