I know phishing can happen on any platform, but this one stood out. I received a typical spam text linking to a fake banking login page, hosted on a default Vercel domain, with a very unpolished UI. It asks for a username and password, then follows up with a verification code prompt. It feels like someone is actively harvesting credentials in real time.

The site: scfedcsoun.vercel.app (do not visit)

I reported it via Vercel’s abuse form over a week ago. No acknowledgment, no takedown.

Is it normal for providers to ignore this kind of thing? Posting here to raise visibility and to see if others have had similar experiences.