music-application-flax[.]vercel[.]app

Analysis indicates that music-application-flax.vercel.app is an active phishing domain targeting users of a music streaming service, as evidenced by the page title 'Spotify - Your favourite music is here.' The domain was registered on April 15, 2026, through Vercel Inc. and currently resolves to IP address 216.198.79.131. Infrastructure analysis reveals the use of Vercel hosting and HSTS, with an SSL certificate issued by Google Trust Services. Detection metrics show the domain is flagged by 19 of 95 security vendors, appears on one security blocklist, and is blocked by PhishDestroy. Trust scores from Gridinsoft and Scamadviser are both at 1/100, further supporting its classification as malicious. The domain remains active as of July 12, 2026, with no evidence of takedown or remediation. Defenders should treat this domain as a high-risk credential harvesting site, prioritize blocking at the network and endpoint levels, and monitor for related infrastructure reuse under the same registrar or hosting provider. The exact phishing kit or backend infrastructure is not yet analyzed, but the combination of low trust scores, vendor detections, and brand impersonation confirms its malicious intent.