listed-livegrabs11[.]vercel[.]app

Analysis of listed-livegrabs11.vercel.app shows that the domain was registered on 21 February 2026 through Tucows Domains Inc. The domain resolves to 216.198.79.67, an address owned by Amazon.com, Inc. (AS16509) located in the United States. The site presents an HTTPS certificate issued by Google Trust Services under the WR1 root, and the HTTP response code returned is 451, indicating that the resource is unavailable for legal reasons. The page title returned by the server is “Deployment Unavailable”, and the underlying platform is identified as Vercel with HTTP Strict Transport Security (HSTS) enabled. Threat intelligence indicates that the domain is currently listed on four independent blocklists (PhishDestroy, Polkadot, Enkrypt, Codeesura) and has been flagged by 15 of 93 security vendors on VirusTotal.

The combination of recent creation, use of a reputable cloud hosting provider, and the presence on multiple phishing‑related blocklists strongly suggests that the domain is being used for a generic phishing campaign, despite the current offline status. Defenders should treat any network traffic to or from 216.198.79.67 associated with this hostname as malicious. The domain should be added to deny‑list entries in DNS filtering solutions, web proxy filters, and endpoint firewalls. Because the certificate is valid and the infrastructure is hosted on a widely trusted cloud service, reliance on certificate validation alone will not provide sufficient protection.

Continuous monitoring of the IP address for re‑activation and periodic re‑scans on VirusTotal are recommended. Organizations should also review authentication logs for attempts to submit credentials to URLs containing “listed‑livegrabs11.vercel.app” and enforce multi‑factor authentication to mitigate credential‑theft risk.