clear-randike-benchod[.]vercel[.]app

Analysis of clear-randike-benchod.vercel.app shows a newly registered Vercel‑hosted site that has been flagged as a generic phishing vector. The domain was created on February 21, 2026 and registered through Tucows Domains Inc. Technical fingerprints reveal the use of Vercel infrastructure with HTTP Strict Transport Security enabled and an SSL certificate issued by Google Trust Services under the WR1 profile. DNS resolution points to the IP address 216.198.79.195, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. A simple HTTP request returns a 404 status code while the page title reports "Redirecting...", indicating that the site may have been designed to redirect victims before being taken down.

The domain appears on three known security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans recorded a single positive detection out of 93 scanning engines, reinforcing the suspicion of malicious intent. Current status is offline, suggesting that the phishing campaign has been disrupted or the hosting has been terminated.

Open questions remain regarding the exact phishing kit employed, the targeted brand or credential type, and whether any victim data was harvested before takedown. Defenders should continue to deny any network connections to this host, add the domain and its resolving IP to internal blocklists, and monitor for any re‑registration attempts or similar subdomains on the same Vercel account. Ongoing threat‑intel feeds should be consulted for updates on related indicators, and any user reports of encounters with the URL should be escalated for forensic analysis.