bot-verify[.]vercel[.]app

The domain bot-verify.vercel.app was identified as a credential phishing site designed to harvest user login credentials. It did not impersonate a specific brand or employ a known drainer kit. As of the latest verification, bot-verify.vercel.app has been taken offline, though it previously posed an elevated risk of credential theft.

Technical analysis shows that bot-verify.vercel.app was flagged by 2 of 95 security vendors on VirusTotal, including MalwareURL and Trustwave. It appeared on one security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolved to the IP address 216.198.79.3, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate was issued by Google Trust Services / WR1, and the site returned a 404: NOT_FOUND page title with an HTTP 404 status. Detected technologies included Vercel and HSTS.

Users who may have interacted with bot-verify.vercel.app should immediately change passwords for any accounts accessed during the exposure period, particularly if credentials were entered. Enabling two-factor authentication (2FA) on all critical accounts is strongly recommended to mitigate further risk. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or service providers. The domain can be reported to anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG) to assist in broader threat mitigation efforts.