hjukg[.]vercel[.]app

The domain hjukg.vercel.app has been identified as a confirmed phishing site, posing an elevated risk to users. No specific brand or drainer kit has been associated with this domain. The threat is categorized as generic_phishing, indicating that it is designed to capture a wide range of sensitive information from unsuspecting victims.

Infrastructure analysis reveals that hjukg.vercel.app has been flagged by 20 out of 95 security vendors on VirusTotal. The domain is registered through Tucows Domains Inc. and resolves to the IP address 64.29.17.3, which is located in the United States and is part of the Amazon.com, Inc. network (AS16509). The domain was created on February 21, 2026. It currently appears on two security blocklists, PhishDestroy and PhishingDB, further confirming its malicious nature. The SSL certificate is issued by Google Trust Services / WR1, which may have been used to lend a false sense of security to potential victims.

The domain hjukg.vercel.app is currently offline, which suggests that it may have been taken down by security measures or abandoned by the attackers. Despite its offline status, the domain remains a threat due to the potential for reactivation or similar phishing sites using the same infrastructure. Users are advised to avoid visiting this domain and to ensure their security software is up-to-date to protect against any future threats. Security teams should monitor related IP addresses and domain registrars for any signs of re-emergence and take appropriate action to mitigate risks.