mismatesenvp22452[.]vercel[.]app

PhishDestroy identifies mismatesenvp22452.vercel.app as an active social engineering phishing domain leveraging deceptive impersonation tactics to trick users into divulging sensitive credentials or financial information. This platform exhibits no affiliation with legitimate brands but relies on spoofed interfaces to mimic trusted services, a common tactic in credential harvesting campaigns. No evidence of a custom drainer kit was detected, suggesting reliance on generic phishing templates or third-party toolkits. This domain was flagged by PhishDestroy and Google Safe Browsing with a SOCIAL_ENGINEERING classification. It was registered through Vercel Inc., resolving to IP 64.29.17.131, with an SSL certificate issued by Google Trust Services. VirusTotal reports 8 out of 95 security vendors detecting this domain as malicious. Additional technical indicators include its recent registration timeline, though the exact creation date is not disclosed by the registrar. As of the latest assessment, mismatesenvp22452.vercel.app remains active and unblocked by major browsers or DNS filters. PhishDestroy recommends immediate blacklisting of this domain and the associated IP address (64.29.17.131) at the network level. Users should avoid accessing this domain and report any interactions to their security teams. The elevated risk stems from its ability to evade detection through Vercel’s hosting infrastructure and the lack of widespread takedown actions, necessitating proactive defense measures.