mismatesenvp224245[.]vercel[.]app

This domain is flagged as a high-risk credential theft operation. Analysis indicates the infrastructure is designed to harvest login credentials through deceptive video-based lures, commonly associated with fake streaming or social media impersonation tactics. The domain presents itself under the page title 'Video Diversión,' suggesting an attempt to exploit user curiosity or trust in multimedia content to facilitate unauthorized access to accounts. Infrastructure analysis reveals the domain mismatesenvp224245.vercel.app was registered through Vercel Inc. on April 21, 2026, and remains active. It resolves to the IP address 64.29.17.131, located in the United States under Vercel, Inc. The domain appears on one security blocklist and is flagged by 12 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, does not mitigate the malicious intent of the domain. The creation date, combined with the low detection ratio, suggests a recently deployed campaign with evolving evasion techniques. Mitigation against credential theft via this domain requires immediate action. Users should avoid interacting with the site, particularly any prompts to enter login details or personal information. Network-level blocking of the domain and its associated IP (64.29.17.131) is recommended for organizations. Individuals who may have engaged with the site should reset passwords for any accounts accessed during the session, enable multi-factor authentication where available, and monitor accounts for unauthorized activity. Security teams should correlate this domain with other indicators, such as the page title 'Video Diversión,' to identify related phishing infrastructure.