io2k-bmmanager762863[.]vercel[.]app

The domain io2k-bmmanager762863.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and points to the IP address 64.29.17.131, which belongs to Amazon.com, Inc. (AS16509) and resolves to a United States location. The hosting environment is identified as Vercel and the site enforces HTTP Strict Transport Security (HSTS). The TLS certificate is issued by Google Trust Services under the WR1 label, indicating a legitimate certificate chain but offering no indication of malicious intent. An HTTP request to the site returns status code 451 with the page title "Deployment Unavailable," suggesting the application instance has been taken offline.

The domain is currently flagged by PhishDestroy and appears on a single public blocklist. VirusTotal analysis shows that 15 of 93 security vendors classify the domain as malicious, reinforcing the suspicion of phishing activity. The elevated risk rating reflects the combination of a recent registration, cloud hosting on a widely used platform, and detection by multiple security engines.

While the page content is not publicly accessible, the available indicators—certificate, hosting stack, HTTP response, and vendor detections—suggest that the domain was employed for a generic phishing campaign before being taken down. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP block, and consider adding the domain to internal blocklists. Because the site is offline, further intelligence collection may be limited, but the existing evidence warrants maintaining the elevated risk posture until additional context, such as victim reports or payload analysis, becomes available.