offer-redirect-bridge[.]vercel[.]app

Analysis of offer-redirect-bridge.vercel.app indicates that the domain is currently active and has been classified as a generic phishing site. The domain appears on three independent security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, confirming that multiple threat‑intelligence feeds have identified malicious behavior associated with it. Registration information shows the domain was provisioned through Vercel, a cloud platform that frequently hosts short‑lived or dynamically generated sites, which can complicate takedown efforts.

A VirusTotal scan was performed by 91 antivirus engines; none of the engines raised a detection at the time of scanning, but the absence of a detection does not constitute evidence of safety, especially given the blocklist presence. No additional technical artifacts such as IP address, ASN, SSL certificate details, HTTP response codes, or page title have been disclosed, leaving the underlying hosting infrastructure and content unknown. Defenders should prioritize immediate containment by adding the domain to network‑level deny lists and ensuring that endpoint protection solutions reference the blocklists that already flag it.

Continuous monitoring for new indicators, such as resolved IP addresses or observed traffic patterns, is advised to detect any shift in infrastructure that might bypass existing blocks. Given the current evidence, treating the domain as hostile and enforcing strict blocking policies is the prudent response.