blink[.]lat

Analysis of blink.lat indicates an active phishing domain registered on May 22, 2026, through Name.com, Inc. The domain resolves to the IP address 216.150.1.1 and presents a page titled 'Vercel Security Checkpoint,' suggesting an attempt to mimic infrastructure associated with the Vercel hosting platform. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. As of July 12, 2026, the domain remains active and is flagged by 11 of 95 security vendors in available scans, though the specific detection context is not detailed. Threat intelligence platforms report the domain in 16 distinct pulses, and it appears on two security blocklists, with additional blocking by at least two security mechanisms. Infrastructure analysis reveals the use of Vercel-related technologies, which may be leveraged to lend credibility to the phishing attempt. The domain's registration age—less than two months at the time of assessment—aligns with common patterns observed in short-lived phishing campaigns. Defenders should treat this domain as high-risk, particularly in environments where Vercel or similar hosting services are utilized. Immediate blocking at the network and endpoint levels is recommended, alongside monitoring for related indicators of compromise. The exact content and target of the phishing scheme remain unconfirmed, as no further brand or scam-type details are available in the provided data.