carbify[.]vercel[.]app

Analysis of the domain carbify.vercel.app indicates it was a phishing site targeting users with a fraudulent $CBY airdrop offer. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolved to the IP address 216.198.79.195, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate was issued by Google Trust Services (WR1), and the site employed HSTS alongside Vercel hosting technologies. At the time of assessment, the domain returned an HTTP 451 status, indicating it was taken offline, likely due to abuse reports.

The page title, '$CBY Airdrop | Carbify - Verified Carbon Impact,' explicitly advertised a fake airdrop, aligning with the scam type classified as 'Fake Airdrop.' Detection by two security vendors—PhishDestroy and ScamSniffer—along with its presence on two security blocklists, corroborates its malicious classification. VirusTotal scans flagged the domain by 2 of 93 security vendors, though this does not represent exhaustive detection coverage. No additional threat intelligence, such as Open Threat Exchange (OTX) pulses or Safe Browsing classifications, was provided in the available data. Defenders should treat this domain as confirmed malicious, particularly for campaigns impersonating Carbify or related carbon credit initiatives.

The infrastructure (Vercel, Amazon hosting) is consistent with low-cost, disposable phishing deployments. While the domain is currently offline, monitoring for re-registration or similar patterns (e.g., Vercel subdomains with 'airdrop' in the title) is recommended. No evidence links this domain to broader malware distribution or credential-harvesting beyond the airdrop scam classification.