hash-mzits9v1m-glow-s-projects1[.]vercel[.]app

The domain hash-mzits9v1m-glow-s-projects1.vercel.app was registered on January 28, 2020 through Vercel and currently resolves to the IPv4 address 64.29.17.195. Threat intelligence sources have classified the domain as a generic phishing site and have elevated its risk rating to elevated. The domain appears on three external security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, indicating active mitigation by both anti‑phishing and cryptocurrency wallet protection services. VirusTotal analysis shows that two of ninety‑one scanned security vendors flagged the domain, providing additional corroboration of malicious activity.

No further public metadata, such as SSL certificate details, HTTP response codes, or page title, is available at this time, and the content of the hosted site has not been publicly examined. Infrastructure analysis confirms that the hosting provider is Vercel, a common platform for rapid deployment of web applications, which can be leveraged by threat actors to obtain a legitimate-looking TLS certificate and fast provisioning. Defenders should add the domain and its resolved IP address to local and network‑level deny lists, monitor outbound traffic for connections to 64.29.17.195, and enforce strict URL filtering policies for any URLs that match the *.vercel.app suffix.

Continuous re‑scanning of the domain with updated threat feeds is recommended, as additional detections may emerge. Organizations that rely on phishing‑resistant authentication should ensure that any credential entry prompts originating from this domain are blocked or flagged for user verification. The lack of publicly observed page content means that the specific phishing template or targeted brand remains unknown; threat analysts should prioritize obtaining a live snapshot of the site for deeper forensic analysis should the domain become active again.