redirect-1482025f[.]vercel[.]app

This domain, redirect-1482025f.vercel.app, is flagged as a generic phishing resource designed to facilitate credential harvesting through deceptive redirects. Analysis indicates the infrastructure is used to mimic legitimate authentication flows, likely targeting users of cloud services or social platforms. No specific brand impersonation or drainer kit signature has been confirmed, but the redirect behavior suggests a modular phishing framework designed for rapid deployment and evasion. Infrastructure analysis reveals the following technical indicators: VirusTotal detection ratio of 18/95 security vendors, indicating moderate but growing consensus on malicious classification. The domain is registered through Vercel Inc., resolving to IP address 64.29.17.3, geolocated to the United States. Created on April 28, 2026, the domain is hosted on Vercel’s platform, leveraging a Google Trust Services SSL certificate (WR1) to present a false sense of legitimacy. It appears on one security blocklist and is currently not listed in Google Safe Browsing databases. The domain remains active as of this report, with no takedown or sinkholing observed. Response actions should include immediate DNS-level blocking of the domain and IP, as well as monitoring for related subdomains or pattern-based variations (e.g., redirect-XXXXXXXX.vercel.app). Users encountering this domain are advised to terminate all connections, clear active sessions, and verify account integrity via official channels. Given the use of ephemeral hosting and SSL encryption, this threat demonstrates persistence and adaptability, warranting continuous vigilance in detection and mitigation efforts.