trustpositif-internetpositif[.]vercel[.]app

This domain, trustpositif-internetpositif.vercel.app, is identified as a generic phishing resource impersonating the Indonesian internet filtering system known as Internet Positif. The page title, Demo Halaman Internet Positif, suggests an attempt to deceive users into believing they are interacting with a legitimate government-operated content restriction portal. No specific drainer kit signatures have been confirmed at this stage, though the impersonation tactic aligns with broader credential harvesting or social engineering campaigns targeting Indonesian internet users. Analysis indicates the domain was registered through Vercel, a platform commonly used for hosting static web applications. As of the latest assessment, the domain resolves to the IP address 216.198.79.195, located within the United States and associated with Vercel, Inc. infrastructure. The SSL certificate is issued by Google Trust Services (WR1), providing an appearance of legitimacy. VirusTotal reports 0 out of 95 security engines flagging the domain, though it appears on one security blocklist, PhishDestroy. The domain was created on March 28, 2026, an anomalous date suggesting potential manipulation of registration metadata or an error in data reporting. The domain remains active and under investigation, with no confirmed takedown or mitigation actions at this time. While detection rates remain low, the presence on a security blocklist and the use of a government service impersonation pose a moderate risk to targeted users. Organizations and individuals are advised to block the domain at the network level and monitor for related infrastructure, particularly any subdomains or redirects associated with Vercel-hosted resources. Users encountering this page should verify the authenticity of internet filtering notices through official government channels before proceeding.