track-octagonal-3423[.]vercel[.]app

track-octagonal-3423.vercel.app was registered through Tucows Domains Inc. on 23 February 2026 and is hosted on Amazon’s AS16509 network, resolving to 64.29.17.67 in the United States. The site presents a self‑declared title “The Best Motherfucking Website” and returns HTTP 404, indicating that the primary page is unavailable. Infrastructure fingerprints show the use of Varnish caching, Vercel front‑end hosting, GitHub Pages assets, Fastly CDN and enforced HSTS, all of which are typical of legitimate services but also provide a flexible staging environment for malicious actors. The SSL certificate is issued by Google Trust Services (WR1), which validates the domain but does not attest to its content.

The domain has been flagged by three independent blocklists and is currently listed by PhishDestroy, MetaMask, and SEAL as a malicious resource. Gridinsoft assigns a trust score of 0 / 100, reflecting the highest level of suspicion. VirusTotal records indicate that the URL was scanned by 93 AV engines, none of which reported a detection at the time of analysis; however, the absence of a detection does not constitute evidence of safety. The site is presently offline, and a 404 response suggests that any payload may have been removed or is temporarily inaccessible.

Because the observable data points converge on a high‑risk profile—recent creation, low trust score, blocklist inclusion, and a provocative title commonly used in phishing campaigns—defenders should continue to treat the domain as malicious. Recommendations include adding the host to internal deny lists, monitoring DNS queries for the 64.29.17.67 address, and ensuring that email gateway and web‑filtering solutions reference the blocklists that have already flagged this domain. Further investigation should focus on retrieving archived snapshots of the site, if any exist, to confirm the exact malicious content that was previously served.