xfinty[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Google users. Analysis indicates the site is designed to deceive visitors into entering credentials or sensitive information by presenting a fraudulent login interface identical to Google’s official portal. Such impersonation attacks often lead to account takeovers, unauthorized data access, or further malware distribution once credentials are harvested. Infrastructure analysis reveals the domain is hosted on Vercel’s platform and resolves to the IP address 216.198.79.195, associated with Amazon’s AS16509 network in the United States. The domain’s SSL certificate is issued by Google Trust Services, a tactic commonly used to enhance legitimacy. As of the latest assessment, 19 out of 95 security vendors on VirusTotal have detected the domain as malicious, and it appears on one security blocklist. Google Safe Browsing has also classified the site as phishing, reinforcing its fraudulent nature. If you or someone in your network has visited xfinty.vercel.app, immediate action is required. First, revoke any sessions or credentials entered on the site, particularly Google account passwords. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access. Scan the device used to access the domain for malware or unwanted software, as phishing sites may deploy additional payloads. Monitor linked accounts for suspicious activity, such as unauthorized logins or transactions, and report the incident to your organization’s security team or a trusted cybersecurity professional for further analysis.