botverify[.]vercel[.]app

The domain botverify.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is currently listed as offline. DNS resolution points to the IP address 64.29.17.131, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. An HTTPS connection is offered using a Google Trust Services / WR1 certificate, and the server advertises HTTP Strict Transport Security (HSTS). When accessed, the site returns an HTTP 404 status with the page title "404: NOT_FOUND," indicating that no substantive payload was served at the time of observation.

Threat intelligence categorises the domain as a credential phishing vector, and it has been added to the PhishDestroy blocklist, representing a single known security blocklist entry. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification despite the limited detection count. Technology fingerprints reveal the use of Vercel hosting, a platform commonly abused for rapid deployment of phishing pages.

The available evidence confirms the domain’s malicious intent, but the exact phishing content and target brand remain unverified because the page returned only a 404 response. Defenders should block the domain name and its resolving IP at perimeter and DNS filters, monitor any future resolution changes, and treat similar Vercel‑hosted subdomains as high‑risk until proven benign. Continuous re‑scanning on VirusTotal and inclusion in internal threat feeds are recommended to capture any re‑activation or content changes.