redirect-39928477[.]vercel[.]app

This domain, redirect-39928477.vercel.app, operates as an active credential harvesting phishing site designed to steal user login credentials. Analysis indicates the site employs deceptive redirects to mimic legitimate login portals, tricking visitors into entering sensitive information such as usernames, passwords, and potentially multi-factor authentication codes. The threat is classified as high-risk due to its active status and targeted nature, which poses significant risks to both individual users and organizational security. Infrastructure analysis reveals the domain is hosted on Vercel Inc.'s platform and resolves to the IP address 216.198.79.131, located in the United States. The domain is registered through Vercel Inc., a legitimate hosting provider often exploited for phishing due to its free tier and ease of deployment. Security validation shows the domain is flagged by 17 out of 95 security vendors on VirusTotal, with one additional blocklist entry confirming its malicious classification. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the threat, as phishing sites frequently use valid certificates to appear legitimate. Users who have visited redirect-39928477.vercel.app should take immediate action to mitigate potential compromise. First, disconnect the device from the network to prevent further data exfiltration. Reset all credentials entered on the site, prioritizing accounts with elevated privileges or financial access. Enable multi-factor authentication on all critical accounts if not already active. Monitor linked accounts for unauthorized activity, including transaction alerts and login notifications. If corporate credentials were exposed, report the incident to the organization’s security team for further investigation and containment. Clearing browser cache and cookies is recommended to remove any residual tracking or session data associated with the phishing attempt.