proxy-rpc[.]vercel[.]app

This domain is under active investigation as a generic phishing threat as of August 03, 2026. The domain proxy-rpc.vercel.app is currently operational and has been identified on one security blocklist, specifically PhishDestroy, which has flagged it for malicious activity. The presence on this blocklist indicates that at least one independent security vendor has assessed the domain as posing a phishing risk, though the specific campaign details or targeted brand have not yet been confirmed. Infrastructure analysis reveals that the domain is hosted on the Vercel platform, a common web hosting service that is frequently abused by threat actors due to its free tier and ease of deployment.

The use of a subdomain under vercel.app is a notable indicator, as legitimate services rarely use such subdomains for user-facing phishing pages, and attackers often leverage this infrastructure to evade domain reputation filters. The domain's SSL certificate is valid, which is expected given the hosting provider, but this does not mitigate the underlying threat. No additional detection data from other vendors or security feeds is available at this time, and the absence of such data should not be interpreted as evidence of safety. The exact content hosted on the domain has not yet been analyzed, so the specific phishing lure, whether credential harvesting, fake login page, or other deceptive material, remains unknown.

Defenders should treat this domain as a potential threat and consider blocking it at the DNS or proxy level, particularly for users who may encounter it in email or messaging contexts. Security teams should monitor for related subdomains on the vercel.app infrastructure, as attackers often rotate domains to avoid takedown. It is recommended to submit the domain to additional threat intelligence platforms for broader visibility and to check internal logs for any connections to this host.