string-9195-simple[.]vercel[.]app

The domain string-9195-simple.vercel.app is a generic phishing site designed to deceive users into disclosing sensitive information, specifically targeting banking credentials. No legitimate brand or drainer kit was identified in this campaign. As of the latest verification, the site has been taken offline, though it previously operated as a banking phishing page.

Technical indicators show that string-9195-simple.vercel.app had 0 of 95 VirusTotal vendors flagging it as malicious, and it was not listed by Google Safe Browsing. However, it appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The domain was registered through Tucows Domains Inc. on February 23, 2026, and resolved to the IP address 64.29.17.195, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. The SSL certificate was issued by Google Trust Services / WR1, and the observed page title mimicked the Electronic Frontier Foundation's website. Technologies detected included Varnish, Vercel, and HSTS, with the site returning a 404 HTTP status at the time of assessment.

Users who may have interacted with string-9195-simple.vercel.app should immediately change any exposed banking credentials and enable two-factor authentication (2FA) on all financial accounts. Monitor accounts for unauthorized transactions and report any suspicious activity to the relevant financial institution. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If personal data was compromised, consider placing a fraud alert with credit bureaus.