ahoraconbdvobtenuncredito[.]vercel[.]app

Analysis of ahoraconbdvobtenuncredito.vercel.app indicates active phishing infrastructure as of 2026-08-07. DNS resolution points to the IPv4 address 64.29.17.131, which belongs to the Vercel hosting platform. The domain is currently listed on two public security blocklists and has been explicitly blocked by the PhishDestroy and OpenPhish feed providers. VirusTotal reports that 18 of 91 scanned scanners flagged the domain, confirming that multiple independent engines have identified malicious behavior.

No additional public metadata such as registrar, creation date, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are available in the supplied intelligence, leaving those aspects unverified. The lack of visible page title or content analysis means the specific lure or credential-harvesting technique cannot be confirmed beyond the generic phishing classification. Defenders should prioritize immediate containment: add the fully qualified domain name to DNS-based deny lists, enforce URL filtering rules to block any HTTP(S) request to the host, and consider blocking the associated IP address 64.29.17.131 at the network perimeter, recognizing that the address may be shared with legitimate Vercel services.

Continuous monitoring of outbound DNS queries for this domain and retrospective log review for any prior connections are recommended. Because the domain is hosted on a cloud platform, rapid takedown may be limited; therefore, threat-intel sharing with upstream providers and inclusion in internal threat feeds will improve detection latency. Until further forensic evidence is obtained, the domain should be treated as a high-confidence phishing indicator.