Vercel Hosting Obvious Phishing Site

2 infecto 1 5/20/2025, 11:50:52 AM

I know phishing can happen on any platform, but this one stood out. I received a typical spam text linking to a fake banking login page, hosted on a default Vercel domain, with a very unpolished UI. It asks for a username and password, then follows up with a verification code prompt. It feels like someone is actively harvesting credentials in real time.

The site: scfedcsoun.vercel.app (do not visit)

I reported it via Vercel’s abuse form over a week ago. No acknowledgment, no takedown.

Is it normal for providers to ignore this kind of thing? Posting here to raise visibility and to see if others have had similar experiences.

Comments (1)

code_aetheris · 5h ago

Yeah this is frustrating... seen stuff like this a few times. Honestly, some of these platforms don’t act unless there’s volume or press involved. what sometimes works is tagging them on X with a screenshot. Also try emailing their security@ or abuse@ directly if the form gets ignored.

Not saying it’ll fix it instantly, but might speed things up a bit. sucks that users have to chase this though.

Building AI-Powered Apps with Firebase AI Logic (firebase.blog)

Towards a JSON API for the JDK (mail.openjdk.org)

Our vision for building a universal AI assistant (blog.google)

Scott Adams, Creator of 'Dilbert,' Says He Has the Same Cancer as Biden (nytimes.com)

What's New with Agents: ADK, Agent Engine, and A2A Enhancements (developers.googleblog.com)

Gemini Diffusion (deepmind.google)

Google Wants You to Pay $250 for a God-Tier Subscription to AI (gizmodo.com)

AI Mode in Google Search (blog.google)

Nearly half of streaming subscriptions are for plans with ads (theverge.com)

Imagen 4 (deepmind.google)

Running the entire HEY test suite on different computers (twitter.com)

Iterator helpers have become Baseline Newly available (web.dev)

Veo 3: Video, meet audio (deepmind.google)

Thank You for Your Existence (daniel.haxx.se)

Gemini 2.5: Our most intelligent models are getting even better (blog.google)

Introducing Veo 3 and Imagen 4, and a new tool for filmmaking called Flow (blog.google)

Why Are Clinical Trials So Complicated? (2020) (science.org)

Where Did 'Jazz,' the Word, Come From? (2018) (wbgo.org)

Teacher Drag a 6yr-Old with Autism by His Ankle Fed OCR Might Not Do Anything (propublica.org)

Tesla Owners Are Installing DIY Rip Cords to Avoid Being Trapped in Case of Fire (fuelarc.com)

Magic Animator (magicanimator.com)

A bestiary of mathematical functions for systems designers (brunodias.dev)

A Fire Sale of Portland's Largest Office Tower Shows How Far the City Has Fallen (wsj.com)

NYC wants to turn 34th Street into a busway (nbcnewyork.com)

UUIDv7 Comes to PostgreSQL 18 (thenile.dev)

Chinese Hackers Hit Drone Sector in Supply Chain Attacks (securityweek.com)

Hackers Earn Over $1M at Pwn2Own Berlin 2025 (securityweek.com)

The Most Implausible Tunneling Method (practical.engineering)

Crawlomatic WordPress plugin patched for critical 9.8 RCE flaw (scworld.com)

Rust turns 10: How a broken elevator changed software forever (zdnet.com)

Good vs. Great Animations (emilkowal.ski)

Show HN: Sleek, Minimal and unique take on Portfolio (jaydip.me)

Investigation Update: Whole Cucumbers Outbreak, May 2025 (cdc.gov)

Microsoft Confirms Emergency Update for Windows Users (forbes.com)

MCP Server for Windows (blogs.windows.com)

I spent 15 years developing a tool to make sense of software version numbers

About Ghost (ghost.org)

Geek Seeks Gold: Search for Dutch Schultz's Missing Treasure [video] (youtube.com)

Microsoft-backed UK tech unicorn Builder.ai collapses into insolvency (ft.com)

Build a realtime chat app with Ably, Next.js and Netlify (ably.com)

Show HN: I built an iOS keyboard for iOS power users (flexiboardapp.framer.website)

Gemini 2.5 Flash Preview 05-20 (ai.google.dev)

Dieter Rams Turns 93 (instagram.com)

Agent Commerce Kit – Protocols for AI Agent Identity and Payments (github.com)

Chicago Sun-Times publishes made-up books and fake experts in AI debacle (theverge.com)

AI poses a bigger threat to women's work, than men's, says report (reuters.com)

Show HN: Transform Web, Text-to-CAD in the Browser (curranjrobertson.github.io)

By 2035 there will be at least one protest about turning off an AI (2023) (longbets.org)

When Textbook RSA Is Used to Protect the Privacy of Users (2018) (arxiv.org)

When Russia and America Coöperated to Avert a Y2K Apocalypse (2019) (newyorker.com)

Vercel Hosting Obvious Phishing Site

Comments (1)