morpho-router-dapp-connect-v5062[.]vercel[.]app

On 3 August 2026 the domain morpho-router-dapp-connect-v5062.vercel.app was observed in threat intelligence feeds as a generic phishing indicator. The site is hosted on the Vercel platform, as indicated by the ".vercel.app" suffix, and no additional infrastructure details such as IP address or ASN have been disclosed in the current dataset. VirusTotal records show that the domain was submitted to 91 scanning engines; none of the engines reported a detection at the time of analysis. The absence of detections does not imply benign intent, and the domain remains listed on at least one public blocklist.

PhishDestroy has explicitly added the domain to its blocklist, confirming that the service considers it malicious. The limited metadata suggests that the campaign is in an early stage, with only minimal observable artifacts. Defenders should incorporate the domain into URL filtering rules, denylist it in perimeter and endpoint solutions, and continue monitoring for any emerging indicators such as newly resolved IPs, SSL certificate changes, or content alterations.

Because the page title and further content have not been harvested, the exact lure employed by the phishing page cannot be described at this time. Ongoing observation of DNS resolution patterns and correlation with user reports is recommended to assess the scope of the campaign. Until further evidence is obtained, the domain should be treated as active and potentially harmful.