fortunemail[.]vercel[.]app

This domain is flagged as a high-risk phishing site specializing in brand impersonation, specifically targeting Bell Business customers through a fake login portal. Analysis indicates the domain is designed to harvest credentials by mimicking the official Bell Business authentication interface, as evidenced by the page title 'Bell Business Site' and the use of a legitimate-looking SSL certificate issued by Google Trust Services (WR1). Infrastructure analysis reveals the domain is hosted on Vercel Inc. infrastructure, resolving to IP address 216.198.79.67 (Cypress Communications, LLC, US). The domain appears on one security blocklist and is detected by 16 out of 95 security vendors on VirusTotal. While the exact registration date is not provided, the active status and recent blocklist inclusion suggest recent malicious activity. The SSL certificate, though issued by a trusted provider, does not mitigate the risk, as phishing domains frequently abuse legitimate certificates to appear credible. Mitigation steps for this specific threat type include immediate blocking of the domain and IP at the network perimeter. Organizations should implement multi-factor authentication (MFA) to reduce the impact of credential theft. End users should be educated to verify domain authenticity before entering credentials, particularly for business service portals. Security teams are advised to monitor for similar domains leveraging Vercel hosting, as this infrastructure is increasingly abused for phishing campaigns due to its free and easily accessible nature.