alexkirsz[.]vercel[.]app

PhishDestroy identifies alexkirsz.vercel.app as an active credential-harvesting phishing domain under investigation for low-detection phishing campaigns. The domain, hosted on Vercel, resolves to IP 216.198.79.67 and currently evades detection with 2/95 VirusTotal detections. Google Trust Services issued its SSL certificate, adding a false sense of legitimacy to the lure. This domain exhibits characteristics typical of generic phishing infrastructure, with no detections despite its active status. The IP address hosting the domain is associated with dynamic or shared hosting environments, which threat actors frequently exploit to deploy phishing pages rapidly. The registrar, Vercel Inc., provides legitimate hosting services, making abuse harder to mitigate without proactive threat hunting. Users who visited alexkirsz.vercel.app should avoid entering any credentials or sensitive information. If credentials were submitted, immediately reset passwords for the affected service and enable multi-factor authentication. Monitor accounts for unusual activity and report any suspicious transactions to the appropriate security teams. Blocking the domain and associated IP (216.198.79.67) at the network perimeter is strongly advised to prevent further exposure.