proxy-router-eight[.]vercel[.]app

proxy-router-eight.vercel.app has been observed on a security blocklist and is actively blocked by PhishDestroy. The domain was submitted to VirusTotal where it was examined by 91 scanning engines; none reported a detection at the time of analysis. The absence of detections does not constitute a clean bill of health, as the blocklist entry confirms malicious intent.

No public information on the hosting provider, IP address, ASN, or SSL certificate has been disclosed, and the page title or brand targeting has not been publicly released, leaving the exact phishing lure undefined. The current evidence points to a generic phishing operation, but the specific credential‑stealing vector, victim profile, or impersonated brand remain unknown. Defenders should add proxy-router-eight.vercel.app to outbound filtering rules and ensure it is blocked at DNS, proxy, and web gateway layers.

Continuous monitoring of threat intelligence feeds for any new indicators, such as IP resolution changes or associated malware hashes, is advised. Organizations should also review internal logs for any recent connections to the domain and consider incident response if user interaction is detected. Given the active blocklist status, the domain should be treated as high‑risk until further analysis clarifies its payload and target.