7-0070hu[.]vercel[.]app

The domain 7-0070hu.vercel.app is currently active and identified as a generic phishing site specifically designed to impersonate Web Mail login portals. Analysis indicates this infrastructure is engineered to harvest user credentials by presenting a fraudulent interface indistinguishable from legitimate email service providers. No specific brand is named in the page title, but the use of "Web Mail" suggests broad targeting of enterprise and personal email users. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.3. Security vendors on VirusTotal flag this domain as malicious, with 12 out of 95 engines detecting it as phishing-related. Google Safe Browsing classifies the threat under "SOCIAL_ENGINEERING," confirming its intent to deceive users. The SSL certificate is issued by Google Trust Services, which, while legitimate in origin, is frequently exploited by threat actors to lend false credibility to malicious sites. No historical registration data is available, but the domain's structure (7-0070hu) suggests a disposable or dynamically generated naming convention typical of phishing campaigns. The domain remains active as of this report, posing a high risk to users who may inadvertently enter credentials. Organizations and individuals are advised to block access to 7-0070hu.vercel.app at the network level and implement email filtering rules to prevent delivery of messages linking to this domain. Users who may have interacted with the site should immediately reset passwords for any accounts accessed through it and enable multi-factor authentication where available. Security teams should monitor for indicators of compromise, including the IP address 216.198.79.3 and the domain's SSL certificate fingerprint, to detect potential lateral movement or data exfiltration attempts.