openopenbox307[.]vercel[.]app

Analysis of openopenbox307.vercel.app indicates a high-risk phishing domain hosted on Vercel infrastructure. As of July 24, 2026, the domain resolves to IP address 64.29.17.195, geolocated within the United States under Amazon.com, Inc.'s AS16509. The HTTP response code 451 (Unavailable for Legal Reasons) and the page title 'Deployment Unavailable' suggest the hosting provider or registrar has taken enforcement action, resulting in the current offline status. No nameservers are reported, which may indicate recent suspension or technical disruption.

The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, supporting its classification as malicious infrastructure. Sixteen of 95 security vendors on VirusTotal flagged the domain, though the specific detection rules or payloads are not detailed in available data. The SSL certificate is issued by Google Trust Services (WR1), a common issuer for both legitimate and malicious sites, providing no definitive signal on its own. Vercel, the hosting provider and registrar, is frequently used for rapid deployment of phishing pages due to its free tier and ease of use.

The absence of a known phishing kit or brand target in the available data limits attribution beyond generic phishing activity. Defenders should treat this domain as confirmed malicious and update web filters, endpoint protection, and network monitoring rules to block access. Given its offline status, no active threat is present, but historical logs should be reviewed for connections to this infrastructure. Further analysis of related domains or IP ranges may reveal additional compromised assets.