larochimates27112[.]vercel[.]app

PhishDestroy identifies larochimates27112.vercel.app as an active romance scam phishing domain operating at high risk. The domain uses a deceptive page title 'Encuentroooos, fotooossss' to lure victims into fake social interactions, a classic tactic in romance scams. Verified intelligence confirms 13/95 VirusTotal vendors flag this site for malicious activity, while Google Safe Browsing classifies it under SOCIAL_ENGINEERING. The domain resolves to IP 64.29.17.3 and operates under Vercel Inc.'s infrastructure, leveraging Google Trust Services for SSL certification. This domain exhibits multiple red flags indicative of fraudulent behavior. Security vendors on VirusTotal have detected malicious content at a rate of 13/95, suggesting widespread suspicion of the site's legitimacy. The registrar, Vercel Inc., is a legitimate hosting provider, but threat actors frequently exploit such platforms to host phishing pages. The domain's SSL certificate, issued by Google Trust Services, does not validate its trustworthiness, as scammers often leverage free or automated SSL certificates to appear legitimate. Additionally, Google Safe Browsing's SOCIAL_ENGINEERING classification further confirms the site's intent to deceive users through fabricated social interactions. To mitigate risks associated with romance scam phishing domains like larochimates27112.vercel.app, users should avoid interacting with unsolicited romantic or social invitations, especially those originating from untrusted domains. Organizations should implement browser-based protections that leverage Google Safe Browsing and VirusTotal threat feeds to block access to this domain. Network administrators should configure firewalls to deny traffic to IP 64.29.17.3 and inspect outbound traffic for connections to this IP. If exposure occurs, victims should report the incident to local cybercrime units and reset compromised credentials immediately.