3lzn-casefb255128[.]vercel[.]app

The domain 3lzn-casefb255128.vercel.app was registered through Tucows Domains Inc. on February 21, 2026. Network resolution points to IP address 216.198.79.67, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. Technical fingerprinting shows the site was hosted on Vercel and served over HTTPS with HSTS enabled, using a Google Trust Services / WR1 certificate.

An HTTP 451 response returned the page title "Deployment Unavailable," indicating the content was deliberately taken offline. Threat intelligence sources have already flagged the domain: PhishDestroy listed it as blocked, it appears on one public security blocklist, and VirusTotal recorded detections from 14 of 93 scanned security vendors. The aggregate evidence points to a generic phishing operation that was active before being taken down.

Current status is offline, so active exploitation is unlikely, yet the infrastructure—Vercel hosting and Amazon‑owned IP space—may be reused for future malicious campaigns. Defenders should continue to block the domain at perimeter firewalls and DNS filters, monitor the underlying IP for any re‑activation, and apply URL‑filtering rules for the Vercel sub‑domain pattern. Ongoing threat‑intel feeds should be consulted for any resurgence, and incident response teams should treat any future traffic from this host as suspicious until a thorough content analysis can be performed.