alisaduncan[.]vercel[.]app

This domain is flagged as a credential harvesting phishing endpoint targeting users through deceptive search engine branding. The site mimics legitimate web services to trick visitors into submitting login credentials, financial details, or personal information under false pretenses. Analysis indicates the page title "Wiby - Search Engine for the Classic Web" is used to lend credibility, while the actual content likely contains hidden input forms or redirects to fraudulent authentication portals. Infrastructure analysis reveals the domain was registered on April 29, 2026, through Vercel Inc., a platform commonly abused for rapid deployment of malicious landing pages. Despite its recent creation, the domain has already been added to three security blocklists, including PhishDestroy and MetaMask. VirusTotal shows zero detections across 95 engines, suggesting the threat is either new or employs evasion techniques to avoid automated detection. The domain resolves to IP address 216.198.79.131, hosted in the United States under Vercel’s infrastructure, with an SSL certificate issued by Google Trust Services. Users who have visited alisaduncan.vercel.app should immediately terminate any active sessions and avoid entering credentials or personal data. Clear browser cache, cookies, and saved passwords for the domain, as phishing pages often persist through local storage. Run a full system scan using updated security tools to detect potential malware or backdoors. If credentials were submitted, reset passwords for all associated accounts, enable multi-factor authentication, and monitor for unauthorized activity. Report the domain to security teams or threat intelligence platforms to aid in broader mitigation efforts.