midnight-casino[.]vercel[.]app

This domain, midnight-casino.vercel.app, is flagged as an active phishing site targeting users with an airdrop scam. Registered on May 11, 2026, through Vercel Inc., the domain resolves to IP 64.29.17.195, hosted in the US under Vercel infrastructure. Analysis indicates the use of a known phishing kit labeled as an 'Airdrop Scam,' though the exact mechanics of the scam remain unconfirmed due to limited content analysis. The domain is currently active, returning an HTTP 200 status, and employs HSTS alongside a Google Trust Services SSL certificate (WR1). Security vendors have detected malicious activity, with 6 of 92 flagging the domain on VirusTotal. It appears on three security blocklists and is actively blocked by at least three threat intelligence feeds. The page title, 'Midnight Casino,' suggests a gambling or reward-themed lure, though no specific brand impersonation has been verified. Nameserver records are absent, which may indicate an attempt to obscure infrastructure details. Defenders should prioritize blocking this domain at the network level, particularly in environments where cryptocurrency or financial transactions occur. Monitoring for related subdomains or IP reuse under Vercel’s hosting range (64.29.17.0/24) is recommended. Given the domain’s recent registration and active status, further phishing campaigns leveraging similar infrastructure are likely. No user interaction with the site should be permitted until it is confirmed inactive or remediated.