credit-for-free[.]vercel[.]app

The domain credit-for-free.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. and points to the Amazon‑owned address 216.198.79.67 (AS16509, United States). Passive DNS shows the site is hosted on Vercel and serves an HTTPS certificate issued by Google Trust Services under the WR1 label, indicating a valid TLS chain. An HTTP request returns status code 451 and the page title “Deployment Unavailable”, which suggests the front‑end has been taken down. VirusTotal has logged 15 detections out of 95 scanned vendors, and the domain appears on one external blocklist.

Independent phishing‑filtering service PhishDestroy also lists the domain as blocked. The infrastructure exhibits HSTS enforcement, a common hardening feature. Although the site is currently offline, the combination of a recent registration, Amazon‑hosted IP, valid Google certificate, multiple vendor detections, and inclusion on a phishing blocklist strongly indicates that the domain was used for a phishing campaign.

No additional payload, landing‑page screenshots, or targeted brand information are publicly available, so the exact luring technique and victim profile remain unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration of the same name or similar sub‑domains on the same IP range, and update detection rules to flag future resolutions to 216.198.79.67. Ongoing telemetry collection is advised to capture any resurgence of activity.