listed-livegrabs34[.]vercel[.]app

The domain listed-livegrabs34.vercel.app was created on 21 February 2026 through Tucows Domains Inc. It resolves to the IP address 216.198.79.67, which is announced by AS16509 Amazon.com, Inc. and geolocated to the United States. The TLS certificate presented by the host is issued by Google Trust Services under the WR1 identifier, indicating a standard Vercel‑provided certificate. The site reports an HTTP 451 response and the page title returned is “Deployment Unavailable”, suggesting the service has been taken offline. VirusTotal scans show that 16 of 95 antivirus and URL‑reputation engines flagged the domain, a level of detection consistent with known phishing infrastructure.

The domain appears on four independent security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura, reinforcing the suspicion that it was used for generic phishing campaigns. Technical fingerprints include the Vercel platform and enforced HTTP Strict Transport Security (HSTS). No additional content or credential‑harvesting pages have been captured; the exact phishing kit, target brand, or lure used by the site remains unknown. Defenders should immediately block network resolution to 216.198.79.67 and add listed-livegrabs34.vercel.app to local and upstream DNS deny lists.

Continuous monitoring of the domain’s DNS records is advised in case the site is re‑activated. Where possible, telemetry from endpoint protection should be correlated with the 16 VirusTotal detections to identify any compromised hosts. Organizations should also consider reporting the indicator to shared threat‑intelligence feeds to improve collective visibility.