guildjoin[.]vercel[.]app

Analysis of guildjoin.vercel.app shows that the domain was registered on February 21, 2026 through Tucows Domains Inc. The DNS resolves to IP address 64.29.17.67, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site is hosted on Vercel, as indicated by the technology fingerprint, and HSTS is enforced. An SSL certificate issued by Google Trust Services / WR1 is present, confirming that TLS termination is handled by the hosting provider. HTTP requests return a 404 status code and the page title is reported as “404: NOT_FOUND”, indicating that no content is currently served.

The domain has been taken offline, and it appears on a single security blocklist, specifically PhishDestroy, which has already blocked it. VirusTotal analysis shows that one out of ninety‑three security vendors flagged the domain, confirming at least minimal malicious suspicion. No additional public threat intelligence such as OTX or Safe Browsing is listed in the available data. The limited evidence suggests that the domain was used for a generic phishing campaign, but the current offline status and 404 response mean that the malicious payload is no longer reachable.

Defenders should continue to monitor the IP address 64.29.17.67 for any resurgence of activity, add the domain to internal block lists, and consider correlating any recent authentication attempts or credential submissions against this indicator. Because the registrar is Tucows Domains Inc., future registrations from the same registrar should be scrutinized, especially those that resolve to the same hosting provider. In the absence of further artifacts, the risk assessment remains elevated due to the confirmed phishing classification and the presence on a blocklist, despite the domain’s current inactivity.