html-vs-markdown-llm[.]vercel[.]app

Analysis of html-vs-markdown-llm.vercel.app indicates the domain is currently active and serving HTTP 200 responses. Registration information shows it was created through Vercel, a platform that provides rapid deployment of web applications, which is consistent with the hosting of short-lived phishing infrastructure. The domain has been blocked by the PhishDestroy mitigation service and appears on one external blocklist, confirming that at least some security products consider it malicious. VirusTotal reports 13 of 91 scanned scanners flag the site, reinforcing the suspicion of malicious activity. No additional intelligence such as IP addresses, ASN, or country information is available from the supplied data, and the exact phishing lure or target brand has not been disclosed. Because the site continues to respond, defenders should maintain the domain in blocklists, monitor outbound traffic for connections to the Vercel network that include this hostname, and consider employing domain-level filtering at perimeter devices. Further investigation, including live traffic capture and payload inspection, is recommended to determine the precise phishing payload and any compromised credentials.