casefb035129-qk9w[.]vercel[.]app

This domain, casefb035129-qk9w.vercel.app, is flagged as a credential harvesting phishing infrastructure targeting users through deceptive login portals. Analysis indicates the domain was designed to mimic legitimate authentication pages, likely to capture sensitive credentials such as usernames, passwords, and multi-factor authentication tokens. The deployment status showing 'Deployment Unavailable' suggests the phishing kit may have been temporarily disabled or removed, though residual risk remains for users who interacted with the domain prior to takedown. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. on February 21, 2026, an unusually future-dated creation that may indicate domain spoofing or backdating techniques. It resolves to IP address 64.29.17.3, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. Security vendor detections reached 13 out of 95 engines on VirusTotal, while the domain appears on two independent security blocklists. The SSL certificate, issued by Google Trust Services (WR1), provides encrypted communication but does not mitigate the underlying phishing threat. Users who visited casefb035129-qk9w.vercel.app should immediately revoke any entered credentials, particularly for sensitive accounts such as email, financial services, or enterprise applications. Monitor linked accounts for unauthorized access attempts and enable additional authentication factors where available. Network administrators should block the domain and associated IP address at perimeter defenses. Given the elevated risk level and offline status, continued vigilance is advised as threat actors may redeploy similar infrastructure under different domains.