supporteammicro[.]vercel[.]app

The domain supporteammicro.vercel.app is identified as a brand impersonation threat targeting Microsoft, specifically designed to harvest user credentials through a fraudulent login portal. Analysis confirms this domain operated as a phishing site, presenting a page titled 'Sign in to your Account' to deceive users into submitting sensitive authentication details. Current status indicates the domain has been taken offline, though prior activity remains a documented risk. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. and resolved to the IP address 64.29.17.67, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The domain was created on February 21, 2026, an anomalous future date suggesting potential manipulation or misconfiguration. Security vendors flagged this domain on VirusTotal, with 19 out of 95 engines detecting malicious activity. The SSL certificate, issued by Google Trust Services under the identifier WR1, provided a false sense of legitimacy. The domain appeared on one security blocklist and was actively blocked by at least one threat intelligence feed. Current status confirms supporteammicro.vercel.app is offline, reducing immediate risk of user exposure. However, the domain’s infrastructure and registration details remain relevant for historical and forensic analysis. Organizations are advised to update web filtering rules to block the domain and associated IP address 64.29.17.67. Security teams should monitor for similar patterns, including anomalous future registration dates and domains hosted on cloud platforms impersonating trusted brands. End users should be reminded to verify URLs before entering credentials, particularly when prompted by unsolicited login requests. Incident responders should review logs for connections to this domain to identify potential prior compromises.