mismatesenvp36[.]vercel[.]app

This domain, mismatesenvp36.vercel.app, operates as an active credential harvesting phishing site designed to deceive users into submitting sensitive login credentials. The page displays a Spanish-language title, 'Video Diversión', suggesting it targets Spanish-speaking users with fraudulent video content or social media login prompts. Analysis indicates the infrastructure is specifically crafted to mimic legitimate services, likely aiming to collect usernames, passwords, or other authentication details for malicious use. Infrastructure analysis reveals the domain was registered on April 21, 2026, through Vercel Inc., resolving to the IP address 64.29.17.3 located in the United States. The domain is currently flagged by 17 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly marking it as phishing. Additionally, the domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services under the WR1 intermediate. These technical indicators confirm the domain's malicious intent and active status. Users who have visited mismatesenvp36.vercel.app or interacted with its content should immediately cease all engagement and take corrective actions. If credentials were entered, affected accounts must be secured by resetting passwords and enabling multi-factor authentication where available. System scans using updated security tools are recommended to detect potential secondary infections. Network administrators should block the domain and its resolving IP address (64.29.17.3) at the perimeter to prevent further access. Monitoring for unusual account activity or unauthorized access attempts is advised for at least the next 30 days.