mercadolibre-promocao[.]vercel[.]app

This domain, mercadolibre-promocao.vercel.app, is flagged as a high-risk brand impersonation campaign targeting MercadoLibre, a prominent e-commerce platform. Analysis indicates the site mimics legitimate promotional offers to deceive users into disclosing sensitive information or completing fraudulent transactions. The page title, "MoblyStore - Eletrodomésticos com os Melhores Preços | Ar Condicionado, Geladeira, Fogão," further obfuscates its true intent by presenting itself as an unrelated retail store, a tactic commonly employed to evade detection and increase user engagement with malicious content.

Infrastructure analysis reveals the domain was registered through Vercel Inc. on May 14, 2026, and resolves to the IP address 64.29.17.3, hosted within the United States under Vercel, Inc. The SSL certificate is issued by Google Trust Services / WR1, providing a superficial layer of legitimacy. Detection metrics indicate the domain is flagged by 17 out of 95 security vendors on VirusTotal, with an additional presence on one security blocklist, specifically PhishDestroy. Despite these indicators, the domain remains unlisted on Google Safe Browsing at the time of this analysis.

As of the latest assessment, mercadolibre-promocao.vercel.app remains active and continues to pose a significant risk to users. Immediate response actions are recommended, including blacklisting the domain across security platforms and notifying the hosting provider, Vercel Inc., for takedown procedures. Users are advised to exercise caution when encountering unsolicited promotional links, particularly those mimicking trusted brands. Organizations should update their threat intelligence feeds to include this domain and its associated indicators of compromise to mitigate further exposure.