interface-connect[.]vercel[.]app

Analysis of the domain interface-connect.vercel.app was performed on 2026-08-02. The domain is hosted on the Vercel platform, a public cloud service used for static and server-less applications. No registrar information is supplied in the available intelligence, and the domain’s creation date is not disclosed. VirusTotal records indicate that the site has been submitted to the service and examined by 91 AV vendors; none of the engines currently raise a detection.

While the lack of detections does not imply legitimacy, it demonstrates that the malicious payload, if any, has not yet been fingerprinted by the participating scanners. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy mitigation service, which classifies it as a generic phishing campaign. No additional indicators such as ASN, IP address, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are present in the supplied data. Consequently, the observable evidence is limited to the blocklist entry and the PhishDestroy flag.

The uncertainty lies in the absence of content analysis, credential-harvesting behavior, or victim reports, preventing a full attribution of the phishing kit or targeted brand. Defenders should enforce existing blocklist rules, ensure that traffic to the domain is denied at perimeter devices, and monitor for any future detections by VirusTotal or other reputation services. Continuous re-evaluation is recommended, as new intelligence may emerge that clarifies the threat’s operational characteristics.