apples-service-care21p1[.]vercel[.]app

The domain apples-service-care21p1.vercel.app is currently active and classified as a high-risk brand impersonation threat targeting Apple. Analysis confirms the domain hosts a fraudulent customer support page titled 'Apple Customer Service,' designed to deceive users into disclosing sensitive information or initiating unauthorized transactions. The impersonation is explicit, leveraging Apple’s branding to lend credibility to the malicious operation. Infrastructure analysis reveals the domain is flagged by 16 of 95 security vendors on VirusTotal, with additional detections on two security blocklists: PhishDestroy and PhishingDB. The domain resolves to the IP address 216.198.79.195, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. It is registered through Vercel Inc. and uses an SSL certificate issued by Google Trust Services (WR1). Google Safe Browsing has explicitly flagged the domain as phishing, further corroborating its malicious nature. No legitimate registration or creation date is publicly available, but the domain’s active status and recent detections indicate ongoing abuse. As of the latest assessment, apples-service-care21p1.vercel.app remains active and accessible, posing a continued risk to users. Organizations and individuals are advised to block the domain at the network level, including its resolving IP address 216.198.79.195. End-users should be alerted to avoid interacting with any communications or pages associated with this domain. Security teams are recommended to monitor for related indicators, including the SSL certificate issuer and hosting provider, to identify potential lateral movement or additional malicious domains leveraging the same infrastructure.