secure-dappsbridge[.]vercel[.]app

Analysis of secure-dappsbridge.vercel.app indicates that the domain is being used for a credential phishing campaign targeting cryptocurrency users. The site resolves to IP address 216.198.79.195, which is allocated to Amazon.com, Inc. (AS16509) and geolocated in the United States. The hosting provider is Vercel, confirmed by the presence of Vercel technology tags and an HSTS header, suggesting the site is served over HTTPS with enforced transport security. The SSL certificate is issued by Google Trust Services under the WR1 certificate profile, confirming that a valid TLS certificate is in place, a common tactic to increase user trust.

HTTP response code 451 was observed, indicating the content is unavailable for legal reasons, which aligns with the domain being taken offline after detection. The page title returned by the server is "Wallet Troubleshooter," consistent with a crypto‑related phishing narrative. The domain was registered on February 21, 2026 through Tucows Domains Inc., and it appears on a single security blocklist, with PhishDestroy explicitly blocking it.

VirusTotal records show the URL was scanned by 95 vendors, with no detections reported at the time of analysis; however, the absence of detections does not constitute evidence of safety. The overall evidence—dedicated hosting on a reputable cloud provider, a legitimate‑looking TLS certificate, a crypto‑focused page title, and inclusion on a phishing blocklist—supports the classification of this domain as a credential phishing site targeting cryptocurrency wallets. Defenders should continue to block the domain at network perimeters, update URL filtering and threat intelligence feeds, and monitor for any re‑use of the underlying IP address or similar page titles in future campaigns.