casefb680075-7ry9[.]vercel[.]app

The domain casefb680075-7ry9.vercel.app has been confirmed as a generic phishing site. This domain does not appear to target a specific brand or utilize a drainer kit, but it is involved in deceptive practices to extract sensitive information from users. The title displayed on the web page is 'Deployment Unavailable', which indicates that the malicious content may have been removed or is currently inactive.

Technical analysis reveals several indicators of the domain's malicious nature. It is flagged by 11 out of 95 security vendors on VirusTotal, and it has been blocked by services such as PhishDestroy and PhishingDB. The domain resolves to the IP address 216.198.79.67, which is associated with Amazon's AS16509. Registered through Tucows Domains Inc., the domain was created on February 21, 2026. Additionally, Google Safe Browsing identifies this domain as a phishing threat, and it appears on two security blocklists.

Currently, the domain is offline, suggesting that it has been taken down in response to the identified threat. Despite its offline status, the historical data and detection records indicate that the domain posed a high risk when active. Continued monitoring of this domain and similar infrastructure is recommended to prevent potential future threats. Security teams should ensure that any potential residual risks are mitigated by updating blocklists and maintaining vigilance against similar domains.