amritms[.]vercel[.]app

This domain, amritms.vercel.app, is flagged as a high-risk phishing site impersonating the Slashdot brand. Analysis indicates the threat type is a fake login portal, likely designed to harvest user credentials by mimicking the legitimate Slashdot news platform. The page title, 'Slashdot: News for nerds, stuff that matters, & software,' directly replicates the authentic site, increasing the likelihood of successful social engineering attacks. No specific drainer kit signatures have been identified, but the infrastructure aligns with credential theft campaigns targeting technical audiences.

Technical indicators confirm the domain's malicious nature. The domain resolves to IP address 216.198.79.3, hosted under Lefkoff Industries in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common characteristic of phishing sites leveraging free or automated certificate issuance. VirusTotal detection shows 1 out of 95 security vendors flagging the domain, while it appears on 2 security blocklists. Registered through Vercel Inc., the domain benefits from the platform's legitimate hosting reputation, complicating detection efforts. No Google Safe Browsing (GSB) listing is currently recorded, suggesting either recent deployment or evasion techniques.

As of the latest verification, amritms.vercel.app remains active and unmitigated. The domain is blocked by two independent threat intelligence feeds, but no takedown or sinkholing actions have been observed. The remaining risk is classified as high due to the combination of brand impersonation, low detection rates, and persistent accessibility. Users are advised to treat any login prompts from this domain as fraudulent and report interactions to their security teams. Organizations should update blocklists to include this domain and monitor for credential reuse attempts from harvested accounts.