echo-ny[.]vercel[.]app

Analysis of echo-ny.vercel.app indicates an active phishing domain hosted on Vercel infrastructure. The domain resolves to IP 64.29.17.195, registered through Vercel, Inc., with an SSL certificate issued by Google Trust Services (WR1). The page title, 'Echo | Seal the track before the world hears it,' suggests a credential-harvesting or data-exfiltration theme, though the exact target brand or service remains unconfirmed due to lack of deeper content analysis. As of July 19, 2026, the domain returns an HTTP 200 status, confirming operational status. Seven of 91 security vendors on VirusTotal flag the domain, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Google Safe Browsing classifies the threat as social engineering. Defenders should block the domain at the DNS or proxy level, monitor for connections to 64.29.17.195, and review logs for interactions from internal assets. No evidence of takedown or sinkholing has been observed, and the domain remains active.