casefb997224-kfvh[.]vercel[.]app

The domain casefb997224-kfvh.vercel.app was created on February 21, 2026 and is registered through Tucows Domains Inc. It resolves to the IP address 216.198.79.131, which is advertised as belonging to the United States and is part of the Amazon.com, Inc. ASN16509 network. The site presents an HTTP 451 status code with the page title "Deployment Unavailable," indicating that the Vercel deployment has been taken offline. The TLS certificate is issued by Google Trust Services under the WR1 intermediate, confirming that the site used a valid Google‑issued certificate at the time of observation.

Infrastructure analysis shows the presence of Vercel hosting and HTTP Strict Transport Security (HSTS) enforcement, both typical of legitimate Vercel deployments but also frequently abused by malicious actors to lend credibility to phishing infrastructure. The domain appears on a single security blocklist, specifically PhishDestroy, and has been flagged by 13 of 93 VirusTotal scanners, reinforcing the suspicion of malicious intent. No additional intelligence such as Safe Browsing alerts, OTX tags, or detailed malware kit attribution is available.

Because the site is currently offline, direct interaction is not possible, but the combination of a recent registration, Amazon‑owned IP, valid Google certificate, Vercel technology stack, and multiple vendor detections provides a strong indicator of a phishing operation. Defenders should continue to block the domain at network perimeters, monitor the associated IP for any re‑activation, and update detection signatures to include the observed certificate fingerprint and host header patterns. Incident response teams should also consider correlating user reports of credential harvesting attempts targeting the same domain to assess potential exposure.