emagrecimento4[.]vercel[.]app

PhishDestroy identifies emagrecimento4.vercel.app as a credential theft phishing domain impersonating a general fitness/health site (Portuguese keyword “emagrecimento” meaning “weight loss”). The page likely hosts a fake login form to harvest user credentials under the guise of a fitness program. No evidence of a crypto drainer kit or brand logo misuse was observed during initial analysis; the threat is focused on direct credential collection.

Technical indicators confirm elevated risk: the domain is detected by 12 of 95 VirusTotal security vendors, resolves to IP 216.198.79.195, and is registered through Vercel Inc. The SSL certificate is issued by Google Trust Services, and the domain appears on one external blocklist. Registration occurred recently via Vercel’s platform, a common hosting choice for quick-deploy phishing pages.

The domain remains ACTIVE. OpenPhish has already blocked access, and the site shows limited persistence due to Vercel’s dynamic environment. Organizations and end-users are advised to avoid interacting with this domain, reset any reused credentials, and report the URL to security teams. Remaining risk is elevated due to ongoing accessibility and the potential for credential reuse across platforms.