0-autht-lo-xfin-ity-w0965[.]vercel[.]app

Analysis of the domain 0-autht-lo-xfin-ity-w0965.vercel.app indicates that it was registered on February 21, 2026 through Tucows Domains Inc. and subsequently pointed to the Amazon Web Services address 64.29.17.3, which resides in the United States under ASN 16509 (Amazon.com, Inc.). The site presented an HTTP 451 status code with the page title "Deployment Unavailable" and served a TLS certificate issued by Google Trust Services under the WR1 label, confirming the use of Vercel’s hosting platform and the presence of HSTS enforcement. The domain was added to at least one external blocklist and was actively blocked by the PhishDestroy feed, suggesting that security operators have already taken mitigation steps.

VirusTotal scans reported that 20 of 95 antivirus and URL‑reputation engines flagged the domain, reinforcing its classification as a malicious resource. Current observations show the domain is offline, which may be the result of takedown actions or temporary hosting suspension; however, the underlying infrastructure—AWS IP space and Vercel services—remains available for reuse by threat actors. Defenders should continue to block the IP 64.29.17.3 at network perimeters, enforce DNS filtering for the domain, and monitor for any resurgence of related sub‑domains or new Vercel‑hosted payloads.

Because the page content is not publicly available, analysts should treat the site as a potential credential‑harvesting point until further forensic evidence is gathered. Ongoing vigilance is recommended, including periodic re‑query of threat intelligence sources and re‑scanning of the domain should it become active again.