openopenbox302[.]vercel[.]app

Analysis conducted on July 23, 2026 confirms that openopenbox302.vercel.app is a phishing domain hosted on Vercel infrastructure. The domain is currently offline, returning an HTTP 451 status code and displaying the page title 'Deployment Unavailable.' Infrastructure analysis reveals the domain was registered through Vercel Inc. and previously resolved to IP address 216.198.79.67, located within Amazon.com, Inc.'s AS16509 network in the United States. The SSL certificate is issued by Google Trust Services (WR1), and HSTS is enforced on the domain. Detection data indicates the domain has been flagged by 16 of 95 security vendors on VirusTotal, though the exact nature of the phishing content remains unconfirmed due to its offline status.

The domain appears on five security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. No nameservers are currently assigned, and the registrar has not provided additional public details about the registrant. While the domain's specific phishing target or scam type is not explicitly identified in available data, the combination of detection vendor flags, blocklist presence, and hosting on a platform commonly abused for phishing (Vercel) supports its classification as malicious.

Defenders should treat this domain as high-risk and maintain existing blocklist entries. Organizations using Vercel for legitimate purposes should review their deployment logs for unauthorized or suspicious activity associated with this subdomain. Further investigation into the IP address 216.198.79.67 may reveal additional related infrastructure.