zedelivery-online[.]vercel[.]app

This domain is classified as a high-risk credential theft operation designed to impersonate the legitimate Zé Delivery platform. Analysis indicates the campaign targets users seeking delivery services by presenting a fraudulent 'Link Exclusivo' interface, likely harvesting login credentials, payment details, or personal information under false pretenses. The threat type is specifically credential theft through brand impersonation, not a generic phishing attempt or crypto-related fraud. Infrastructure analysis reveals the domain zedelivery-online.vercel.app is hosted on Vercel Inc. infrastructure and resolves to the IP address 64.29.17.67. Detection metrics show 6 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The page title 'Zé Delivery - Link Exclusivo' directly references the legitimate brand, a common tactic in credential theft schemes to establish false legitimacy. No creation date or historical WHOIS data is publicly available due to the domain being a subdomain of vercel.app, which obscures registration details. The domain remains active at the time of analysis, with no evidence of takedown or blocklisting by major security providers beyond the six existing detections. Users encountering this domain should immediately cease interaction and avoid entering any credentials or personal information. Given the credential theft nature of this campaign, affected individuals should rotate passwords for any accounts accessed through the fraudulent site, particularly those associated with Zé Delivery or linked payment methods. Organizations should block the domain and IP address 64.29.17.67 at the network level to prevent further exposure. Users are advised to verify delivery links through official Zé Delivery channels only, as legitimate communications will never direct customers to third-party domains like vercel.app for authentication or payment.