Since September 15, 2026 I have reported through Vercel's official abuse form (vercel.com/abuse), with screenshots, five vercel.app deployments that serve the same phishing kit impersonating DETRAN-ES, the motor-vehicle authority of the Brazilian state of Espirito Santo (official site: detran.es.gov.br). The kit collects citizens' vehicle plate and RENAVAM numbers and shows fake vehicle-tax debts to be paid by PIX. Victims reach it through paid Google ads.
Deployments (all still online on September 19, 2026):
- zoks-online-es.vercel.app (reported Sep 15)
- departamento-ve-es.vercel.app (reported Sep 18)
- agencia-debitante-es-buy.vercel.app (reported Sep 18)
- agencia-estadual-es-mx.vercel.app (reported Sep 19)
- cb-agencia-es.vercel.app (reported Sep 19)
Other providers used in the same scheme (Cloudflare, Netlify, Weebly, Unbounce) removed their parts within hours. Vercel has not acted and its confirmation emails come from a no-reply address, so there is no way to follow up.
Desired resolution: Vercel's Trust & Safety team reviews these reports, removes the five deployments, suspends the account behind them, and provides a working contact for follow-up on abuse reports.
