d-theta-three[.]vercel[.]app

This domain, d-theta-three.vercel.app, is actively flagged as a high-risk cryptocurrency phishing site targeting the CONTI brand, as indicated by its page title 'Register | CONTI'. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. and is hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States, resolving to IP 216.198.79.3. The site employs Vercel hosting and enforces HSTS, which may complicate takedown efforts. It appears on three security blocklists, including PhishDestroy, ScamSniffer, and Enkrypt, and is classified as a crypto-related scam. While only two of ninety-five security vendors on VirusTotal currently detect it, this limited detection does not indicate safety, as phishing domains often evade initial scans. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Defenders should treat this domain as an active threat, prioritizing blocking at the network level and monitoring for related indicators such as the IP, ASN, and hosting provider. The exact content and mechanics of the scam are not yet analyzed, but the combination of brand impersonation, crypto focus, and blocklist presence confirms malicious intent. No legitimate use case is identified for this domain.