Anyone actually gotten a phishing site taken down on Vercel? What worked?
Source Reddit Cybersecurity
Discussion
This report discusses difficulties in getting phishing sites hosted on Vercel's platform taken down despite abuse reports. The phishing site impersonates a legitimate brand to harvest credit card data via fake checkout and 3DS OTP prompts. The reporter seeks community advice on effective takedown strategies, including reporting methods and escalation tactics. No direct technical details or exploit code are provided.
r/cybersecurity (opens in a new tab)u/IcySeaworthiness75850 points0 comments
Title: Anyone actually gotten a phishing site taken down on Vercel? What worked?
Body:
We’re dealing with a phishing site hosted on *.vercel.app that clones a real brand and harvests credit card data (fake checkout + fake 3DS OTP).
We already reported it about a week ago (abuse form / [abuse@vercel.com](mailto:abuse@vercel.com)) and it’s still live. Looking at community threads, that seems pretty common.
Has anyone here actually had a successful takedown?
If yes, what helped?
- Specific wording / evidence in the report?
- Escalating with a case number?
- Reporting via trademark / brand protection instead of “phishing”?
- Safe Browsing / Netcraft / other orgs in parallel?
- Contacting someone on X / LinkedIn?
- Something else?
Also curious about timelines — hours, days, weeks?
Not asking how to bypass anything. Just trying to find what actually gets Vercel Abuse to pull a phishing deployment when the first report stalls.
Thanks.
Impact
The phishing site poses a medium risk by harvesting sensitive financial data from victims, potentially leading to financial fraud and identity theft. The continued availability of the site despite abuse reports increases exposure and risk to users who may be deceived. However, no direct exploitation of software vulnerabilities is described.
Defensive guidance
No official vendor advisory or patch is available since this is a phishing abuse issue on a cloud hosting platform. The report indicates that initial abuse reports to Vercel may not result in prompt takedown. Recommended mitigation involves escalating reports with detailed evidence, possibly including trademark infringement claims, involving third-party organizations such as Safe Browsing or Netcraft, and attempting to contact platform representatives through social media or professional networks. Users should be warned to avoid interacting with suspicious links hosted on the platform.
Summary
A phishing site hosted on the Vercel platform under the *.vercel.app domain is impersonating a legitimate brand to collect credit card information through fake checkout pages and 3DS OTP prompts. Despite abuse reports submitted via Vercel's abuse form and email, the site remains active after about a week. The poster requests community input on successful takedown approaches, including specific reporting language, escalation, use of trademark or brand protection claims, involvement of third-party organizations like Safe Browsing or Netcraft, and timelines for removal. No technical exploit or vulnerability details are included.