paypalfunds[.]vercel[.]app

This domain is flagged for elevated-risk brand impersonation targeting PayPal users. Analysis indicates the infrastructure is designed to deceive victims into disclosing account credentials, payment details, or personal information through a fraudulent payment portal interface. Infrastructure analysis reveals the domain paypalfunds.vercel.app was registered through Vercel Inc. and resolves to the IP address 216.198.79.195, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain was created on January 28, 2020, and currently appears on one security blocklist. Security vendor detection rates show 19 out of 95 engines on VirusTotal flagging the domain as malicious. The SSL certificate is issued by Google Trust Services under the WR1 root, and the page title explicitly displays 'PayPal,' reinforcing the impersonation attempt. PhishDestroy has also blocked access to this domain. Mitigation requires immediate action from both users and network administrators. Users should verify domain authenticity before entering credentials, particularly checking for subtle misspellings or unusual subdomains. Network-level protections should include blocking the IP address 216.198.79.195 and monitoring for connections to Vercel-hosted domains exhibiting similar naming patterns. Organizations should also update security policies to flag domains registered through providers frequently abused for phishing, such as Vercel, and enforce multi-factor authentication for financial accounts to reduce credential theft impact.