listed-livegrabs18[.]vercel[.]app

Analysis of listed-livegrabs18.vercel.app, created on 21 February 2026, shows that the domain resolves to 216.198.79.3, an address owned by Amazon.com, Inc. (AS16509) located in the United States. The site is hosted on Vercel infrastructure and serves an HTTPS certificate issued by Google Trust Services under the WR1 designation, with HTTP Strict Transport Security enabled. An HTTP request returns status code 451, and the only visible page title is “Deployment Unavailable”. The registrar listed is Tucows Domains Inc. Threat intelligence indicates that sixteen of ninety‑three VirusTotal scanners have flagged the domain as malicious, and the domain is currently listed on four independent blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura.

All four providers have actively blocked the domain. No additional public analysis of the page content is available, and the site has been taken offline at the time of reporting. The combination of recent registration, Amazon‑hosted IP, Vercel platform usage, and multiple blocklist listings suggest a high‑confidence phishing operation, despite the generic “Deployment Unavailable” title which may be used to obscure the payload.

Defenders should add the domain and its resolving IP to deny‑list rules, monitor DNS queries for similar Vercel‑hosted subdomains, and continue to reference the four blocklists for updates. Because the site is offline, real‑time capture is not possible, but historical logs may reveal credential‑stealing attempts or malicious redirects. Ongoing observation of the hosting provider’s sub‑domain patterns is recommended to pre‑empt future campaigns.