redirect-bd046fb0[.]vercel[.]app

This domain, redirect-bd046fb0.vercel.app, is identified as an active credential harvesting phishing redirect. Analysis indicates the infrastructure is designed to intercept user credentials by silently forwarding victims to fraudulent login portals. No specific brand impersonation has been confirmed, but the generic redirect behavior suggests broad targeting across multiple services. The domain remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Vercel Inc. and is currently flagged by 18 of 95 security vendors on VirusTotal. It appears on one security blocklist and resolves to the IP address 216.198.79.131, located in the United States under Vercel, Inc. The page title 'Redirecting...' aligns with typical behavior of phishing redirects, which obscure malicious endpoints from victims. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of security to users. Current status confirms the domain remains active, posing a high risk to users who may be redirected to credential harvesting pages. Organizations and individuals are advised to block the domain and associated IP address at the network level. Endpoint protection should be updated to include this domain in phishing detection rules. Users should verify URLs before entering credentials, particularly when redirected from unexpected sources. Monitoring for similar Vercel-hosted redirect domains is recommended due to the platform's frequent abuse in phishing campaigns.