dsk001001010101010010101[.]vercel[.]app

This domain, dsk001001010101010010101.vercel.app, poses a high-risk brand impersonation threat specifically targeting Microsoft users. The page displays the title 'Microsoft Security Support Center,' mimicking official Microsoft security portals to deceive visitors into entering credentials or downloading malicious content. Analysis indicates the site is designed to harvest login details under the guise of security support, potentially leading to account compromise, unauthorized access to corporate or personal data, and further exploitation through social engineering tactics. Technical evidence confirms the malicious nature of this domain. VirusTotal reports 11 out of 95 security vendors flagging the domain as malicious. The domain is registered through Vercel Inc. and currently resolves to the IP address 64.29.17.3, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). It appears on one security blocklist, and Google Safe Browsing has explicitly flagged it as phishing. The SSL certificate is issued by Google Trust Services, which, while legitimate, is commonly exploited by threat actors to lend false credibility to malicious sites. Users who have visited this domain should take immediate action to mitigate potential risks. Any credentials entered on the site must be considered compromised and should be changed immediately across all platforms where the same or similar passwords were used. Enable multi-factor authentication (MFA) on all critical accounts to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions, and report any anomalies to the respective service providers. If corporate credentials were exposed, notify internal security teams to conduct a thorough investigation and contain potential breaches. Avoid interacting with any links or downloads from the domain, and ensure endpoint security tools are updated to detect and block similar threats.