casefb323540-gw2i[.]vercel[.]app

The domain casefb323540-gw2i.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 216.198.79.131, which belongs to AS16509 Amazon.com, Inc. in the United States. Technical fingerprinting shows the site is hosted on Vercel and enforces HTTP Strict Transport Security (HSTS). The TLS certificate is issued by Google Trust Services under the WR1 designation, indicating a valid, publicly trusted certificate chain.

When queried, the HTTP response returned status code 451 and the page title "Deployment Unavailable," confirming that the service is currently taken offline. Threat intelligence sources have flagged the domain as a generic phishing site; 14 of 93 VirusTotal scanners flagged it as malicious, and it appears on one external security blocklist. The domain is also listed as blocked by the PhishDestroy mitigation service, and the overall risk rating is elevated.

While the exact phishing payload or lure has not been harvested, the convergence of a recent creation date, reputable hosting, valid TLS, and multiple vendor detections strongly suggests it was used to host a phishing campaign before being taken down. Defenders should ensure the domain is denied at DNS and proxy layers, add it to intrusion‑prevention and web‑filter policies, and monitor for any re‑hosting activity on the same IP or Vercel account. Ongoing vigilance is advised because the infrastructure—particularly the Vercel deployment—could be leveraged for future phishing attempts.