casefb661420-v5h6[.]vercel[.]app

The domain casefb661420-v5h6.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is hosted on the Vercel platform, as indicated by the detected Vercel technology stack and the presence of HTTP Strict Transport Security (HSTS). DNS resolution points to IP address 64.29.17.131, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. An SSL certificate issued by Google Trust Services (certificate label WR1) secures the site, providing a valid TLS handshake despite the hostile content. When accessed, the server returns HTTP status 451, signalling that the resource is unavailable for legal reasons, and the page title returned is "Deployment Unavailable," confirming that the site has been taken offline.

Google Safe Browsing has flagged the URL for social engineering, and the domain appears on a single security blocklist managed by PhishDestroy. VirusTotal analysis shows that 16 out of 93 security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The aggregate evidence points to a high‑risk generic phishing operation that likely leveraged the Vercel deployment to host counterfeit pages before being removed.

Current uncertainty remains around the exact content that was delivered, as the site is no longer reachable for direct inspection. Defensive actions should include immediate blocking of the domain and its associated IP address at perimeter and endpoint controls, updating URL filtering policies to incorporate the observed blocklist entry, and monitoring for any new subdomains or similar Vercel‑hosted deployments that exhibit the same indicators. Continuous re‑evaluation of threat intelligence feeds is advised to capture any resurgence or related campaigns.