fake-fragment[.]vercel[.]app

The domain fake-fragment.vercel.app is a high-risk brand impersonation threat specifically targeting Telegram users. This phishing domain masquerades as the official Telegram platform to deceive visitors into divulging sensitive account credentials. The page title explicitly reads 'Telegram,' aiming to appear legitimate. No specific drainer kit has been identified, but the site's sole purpose is credential harvesting.

Technical analysis reveals alarming indicators: VirusTotal flags this domain with 8 out of 95 security vendors marking it as malicious. It is registered through Vercel Inc. and resolves to IP address 216.198.79.67. The SSL certificate is issued by Google Trust Services (WR1), which lends a false sense of security. The domain appears on one security blocklist and remains active. No creation date was provided, but the current status confirms it is still operational.

As of the latest intelligence, fake-fragment.vercel.app remains live and continues to pose a significant threat. Users should avoid visiting the site or entering any personal information. If credentials were inadvertently submitted, immediate password changes and enabling two-factor authentication on the real Telegram account are strongly recommended. PhishDestroy advises reporting this domain to relevant authorities and blocking it at the network level to mitigate further risk.