shockify-links[.]vercel[.]app

This domain, shockify-links.vercel.app, operates as a credential harvesting phishing site under the guise of a legitimate link masking tool. Analysis indicates the page displays fake login interfaces designed to capture usernames, passwords, and potentially multi-factor authentication codes. The site specifically mimics branding associated with URL shortening or link management services, increasing the likelihood of user deception through familiar visual cues. Infrastructure analysis reveals the domain is hosted on Vercel Inc. infrastructure, resolving to IP address 64.29.17.67 within Amazon’s AS16509 network. Security vendor detection stands at 2 out of 95 on VirusTotal, with one confirmed entry on a security blocklist. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. No historical registration data is publicly available, suggesting potential use of privacy services or recent domain creation. Users who have interacted with shockify-links.vercel.app should immediately revoke any entered credentials from all associated accounts. Enable multi-factor authentication where available and monitor accounts for unauthorized activity. Network administrators are advised to block the domain and IP address 64.29.17.67 at the perimeter. Report the incident to internal security teams or relevant cybersecurity response organizations for further mitigation.