global-package-tracking[.]vercel[.]app

The domain global-package-tracking.vercel.app was registered on June 08, 2026 through the Vercel hosting platform. Within a month of its creation it surfaced on a security blocklist and has been explicitly blocked by the PhishDestroy feed. VirusTotal analysis shows that 16 of 91 scanning engines have flagged the domain as malicious, indicating a measurable level of detection across independent security vendors.

The evidence points to a delivery‑related fraud campaign, as reflected in the domain name and the classification of the threat as a delivery scam. Infrastructure details such as the hosting IP address, ASN, or SSL certificate configuration have not been disclosed in the available intelligence, and no Safe Browsing, Open Threat Exchange, or page‑title data have been published at this time. Consequently, the exact content and the specific tactics employed by the site remain unverified.

Defenders should treat the domain as hostile: network perimeter controls ought to block DNS resolution and HTTP/S traffic to the domain, intrusion‑detection signatures should be updated to include the observed malicious hash and URL patterns, and threat‑intel feeds should be refreshed to capture any new indicators that may emerge. Continuous monitoring of Vercel‑hosted assets is advised, given the platform’s rapid provisioning capabilities that can facilitate short‑lived scam sites. Analysts should prioritize collection of the site’s response headers, certificate details, and any observed redirects to enrich the profile and support downstream remediation efforts.