supports-protocol[.]vercel[.]app

Analysis of supports-protocol.vercel.app indicates that the domain was registered through Tucows Domains Inc. on February 21 2026. The site resolves to the IP address 216.198.79.67, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The hosting environment is identified as Vercel and the TLS certificate is issued by Google Trust Services under the WR1 designation, confirming a valid HTTPS endpoint despite the site being offline. HTTP responses return status code 451, signalling that the content is unavailable for legal reasons, and the page title presented by the server is “Deployment Unavailable.” The domain is currently taken offline, but historical evidence shows it was used for a tech‑support scam, a variant of generic phishing that typically coerces victims into paying for bogus technical assistance. Security telemetry reinforces the malicious classification.

The domain appears on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating consensus among threat‑intelligence feeds. VirusTotal records indicate that 11 of 93 scanning engines flagged the domain as malicious, providing additional vendor‑level corroboration. The presence of HTTP Strict Transport Security (HSTS) is noted, but it does not mitigate the underlying abuse. No public Safe Browsing or Open Threat Exchange entries were supplied, leaving those vectors unconfirmed. Uncertainty remains regarding the current payload or landing page content because the site is offline and only the generic “Deployment Unavailable” title is observable.

Consequently, the specific tactics, techniques, and procedures (TTPs) employed by the operators cannot be enumerated beyond the confirmed tech‑support fraud intent. Defenders should immediately block resolves‑to IP 216.198.79.67 and add supports‑protocol.vercel.app to URL and domain deny lists.