echo-ap[.]vercel[.]app

The domain echo-ap.vercel.app is assessed at a high risk level and is categorized as a generic_phishing site. The domain is actively being used to impersonate the legitimate 'Echo' service, potentially to steal user credentials or deploy malware.

Infrastructure analysis reveals that echo-ap.vercel.app was registered on June 12, 2026, through Vercel Inc. The domain resolves to the IP address 216.198.79.67 and is secured with an SSL certificate issued by Google Trust Services / WR1. Despite the valid SSL certificate, the domain has been flagged by 2 out of 95 security vendors on VirusTotal, indicating a concerning level of suspicion. The domain appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, further corroborating its malicious intent. The relatively low detection count on VirusTotal and its presence on multiple blocklists suggest that it is a targeted phishing campaign, possibly aimed at specific user groups or organizations.

To mitigate the risks associated with this domain, users are advised to avoid clicking on any links or entering personal information on the website. Network administrators should consider blocking the domain and its associated IP address, 216.198.79.67, to prevent access within their networks. Additionally, security awareness training should be reinforced to help users recognize and report phishing attempts, and multi-factor authentication should be enabled for all critical accounts to add an extra layer of security.