block-rect[.]vercel[.]app

Analysis of the domain block-rect.vercel.app shows that it is currently active and has been classified as a generic phishing infrastructure under investigation. The domain was scanned by VirusTotal on multiple occasions, receiving submissions from 91 independent security vendors; none of the vendors raised a detection flag, indicating that the malicious payload, if any, has not yet been identified by automated signatures. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one reputable anti‑phishing provider has observed abusive behavior associated with the host.

No public page title, SSL certificate details, IP address, hosting provider, or registrar information have been released in the available intelligence, and the brand or service being spoofed has not been disclosed. Consequently, the precise nature of the credential‑harvesting or data‑exfiltration mechanisms remains uncertain.

Defenders should proactively deny network access to block-rect.vercel.app, add it to local and cloud‑based blocklists, and monitor DNS and HTTP traffic for any attempts to resolve or contact the domain. Continuous re‑evaluation is advised, as additional telemetry such as page content, TLS fingerprints, or endpoint analysis may emerge and clarify the threat’s scope.