casefb514333-swow[.]vercel[.]app

Analysis of the domain casefb514333-swow.vercel.app indicates it was active as a generic phishing infrastructure hosted on Vercel's platform. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolved to the IP address 216.198.79.67, associated with Amazon.com, Inc. (AS16509) in the United States. The SSL certificate was issued by Google Trust Services (WR1), a common certificate authority for both legitimate and malicious domains. At the time of assessment, the domain was flagged by 11 of 93 security vendors on VirusTotal, suggesting detection by multiple threat intelligence sources, though the exact nature of the phishing content remains unconfirmed due to its offline status.

The page title 'Deployment Unavailable' aligns with Vercel's default error messaging, which may indicate either an interrupted deployment or a deliberate attempt to obscure malicious activity. The HTTP status code 451, typically used for content unavailable due to legal reasons, further suggests the domain was taken down or restricted. The domain appeared on at least one security blocklist (PhishDestroy) and was classified as offline by the report date of July 24, 2026. Technologies detected include Vercel's hosting infrastructure and HTTP Strict Transport Security (HSTS), which does not inherently indicate malicious intent but is often leveraged by threat actors to lend credibility to phishing pages.

Given the lack of specific brand impersonation details in the available evidence, this domain is classified as generic phishing infrastructure. Defenders should treat any prior resolution to this domain as a potential indicator of compromise (IOC) and monitor for related subdomains or IP associations. Network security teams may consider blocking or alerting on connections to 216.198.79.67 and domains with similar naming patterns (e.g., randomized alphanumeric strings under vercel.app).