webcatalog-two[.]vercel[.]app

PhishDestroy identifies webcatalog-two.vercel.app as a live credential-stealing portal masquerading as a legitimate web service. This phishing site is currently operational and poses an immediate risk to users who may inadvertently submit their login credentials. The domain continues to evade detection, with no flags from VirusTotal vendors at this time, and is actively resolving to a suspicious infrastructure footprint. According to verified telemetry from VirusTotal, webcatalog-two.vercel.app has been assessed by 11 out of 95 detection engines and remains undetected as of the latest scan. This domain was registered through Vercel Inc., resolving to IP address 216.198.79.67, and operates under an SSL certificate issued by Google Trust Services. While its certificate appears trustworthy, the lack of third-party endorsements raises concerns about its legitimacy. The suspicious combination of low blocklist presence and a legitimate hosting provider suggests a carefully crafted facade designed to bypass initial scrutiny. Until further intelligence emerges, PhishDestroy advises all users to avoid interacting with webcatalog-two.vercel.app. Users should verify any unexpected login prompts, especially those claiming to originate from legitimate platforms, by cross-referencing the domain against reputable threat intelligence sources such as PhishDestroy. Administrators are urged to block this domain at the network perimeter and investigate any internal endpoints that may have communicated with the associated IP. Continued monitoring is essential due to the dynamic nature of phishing campaigns and the potential for this domain to escalate into a broader credential theft operation.