verdtrdmakesense[.]vercel[.]app

Analysis of verdtrdmakesense.vercel.app shows a short‑lived deployment hosted on Vercel that was used for a generic phishing campaign. The domain was registered through Tucows Domains Inc. on 21 February 2026 and immediately pointed to the IP address 216.198.79.67, which belongs to Amazon.com, Inc. (AS16509) located in the United States. The site presented the page title “Deployment Unavailable”, indicating that the original Vercel deployment was taken down. HTTPS was served by a Google Trust Services certificate issued under the WR1 intermediate, and the server enforced HTTP Strict Transport Security.

An HTTP 451 response was observed, consistent with a takedown or legal restriction. Threat intelligence feeds have flagged the domain: fifteen of ninety‑three VirusTotal scanners reported malicious behavior, and the domain appears on one external blocklist. PhishDestroy has also listed the site as blocked.

The combination of a freshly created Vercel sub‑domain, a reputable SSL issuer, and rapid detection by multiple vendors suggests the infrastructure was deliberately set up for a short‑term phishing operation and then removed. Defenders should continue to block the domain and its associated IP, monitor for any re‑use of the Vercel sub‑domain pattern, and consider adding the IP to outbound deny lists. Ongoing observation of the registrar and hosting provider for similar rapid‑creation domains is recommended.