cus-tom-er-sup-port-pro-cry-pto[.]vercel[.]app

cus-tom-er-sup-port-pro-cry-pto.vercel.app is a malicious domain currently active and engaged in a generic phishing campaign. The domain mimics legitimate customer support channels for cryptocurrency services, likely aiming to deceive users into divulging sensitive credentials or financial information under the guise of technical assistance. Immediate action is required to mitigate exposure and prevent potential account takeovers or financial loss.

PhishDestroy identifies this domain as a high-risk phishing vector, currently active and impersonating cryptocurrency customer support infrastructure. Intelligence indicates the domain was flagged by 10 of 95 VirusTotal security vendors, registered through Vercel Inc., and resolves to IP address 216.198.79.3. The domain leverages a Google Trust Services SSL certificate, suggesting an attempt to appear legitimate. While the exact registration date is unverified, the presence of 10 detections across multiple security platforms underscores its malicious nature. Notably, the domain’s infrastructure aligns with common phishing tactics, including the use of reputable hosting and SSL services to bypass initial scrutiny.

This domain remains active and poses an elevated threat to unsuspecting users seeking cryptocurrency support. PhishDestroy strongly advises organizations and individuals to block this domain at the network and endpoint levels. Users should avoid accessing the URL entirely and report it through their organization’s security channels or to relevant abuse teams. Additionally, if any interaction has already occurred, users must reset passwords, revoke any exposed session tokens, and monitor accounts for unauthorized activity. Proactive threat hunting and user awareness training are critical to preventing further exploitation of this phishing campaign.