business-secure-login[.]vercel[.]app

Analysis indicates that the domain business-secure-login.vercel.app is actively being used for credential phishing. The domain is hosted on Vercel Inc., as indicated by the registrar information, and resolves to the IPv4 address 64.29.17.131. Public threat intelligence sources have flagged the domain; it appears on one security blocklist and is listed by PhishDestroy as a blocked entity. Google Safe Browsing classifies the site under social engineering, confirming that it is recognized as a malicious login vector.

VirusTotal reports that fifteen of ninety‑one scanning engines have identified the domain as malicious, reinforcing the suspicion. The domain’s nameserver lookup returned NS_NOT_FOUND, suggesting that standard DNS delegation records are unavailable or have been deliberately obscured, which is a common tactic to impede attribution. The combination of blocklist presence, Safe Browsing labeling, and multiple vendor detections establishes a high confidence that the site is being leveraged to harvest credentials. No additional public information such as SSL certificate details, HTTP response codes, or page titles has been disclosed, leaving the exact content of the landing page unverified.

Defenders should block any outbound or inbound traffic to this domain, add it to internal deny lists, and monitor for related indicators of compromise, including connections to the IP address 64.29.17.131. Organizations should also educate users about the risk of unsolicited login prompts that reference the domain, and consider employing URL filtering solutions that reference the listed blocklists. Ongoing observation is recommended to detect any changes in hosting or additional infrastructure that may be deployed.