confirmacionmsn[.]vercel[.]app

confirmacionmsn.vercel.app was registered on February 21 2026 through Tucows Domains Inc. The domain resolves to the Amazon‑owned address 216.198.79.3, located in the United States and announced by ASN 16509 (Amazon.com, Inc.). The site is currently offline, returning HTTP 451 “Unavailable For Legal Reasons”, and the only visible content is the page title “Deployment Unavailable”. Infrastructure analysis shows the host uses Vercel’s platform and enforces HTTP Strict Transport Security. The TLS certificate is issued by Google Trust Services under the WR1 designation, indicating a valid, publicly trusted certificate.

VirusTotal scans report that fifteen of ninety‑three anti‑malware engines flag the domain, confirming a consensus of malicious intent. The domain appears on a single security blocklist, PhishDestroy, which has taken it offline. The presence of Vercel and a legitimate certificate does not mitigate the phishing risk, as the underlying payload is likely delivered through the Vercel deployment before removal. Evidence points to a credential‑phishing campaign, consistent with the “Credential Phishing” classification in the intelligence feed.

However, because the site is no longer reachable, the exact phishing page template, target brand, or credential collection method cannot be verified. Defenders should continue to block the domain at DNS resolvers and firewalls, monitor for any resurgence of the same host or similar Vercel‑based subdomains, and consider sharing the indicator set with threat‑intel sharing platforms. Ongoing observation of the IP address 216.198.79.3 for new malicious deployments is recommended, as the Amazon infrastructure can host multiple unrelated sites.