Hey everyone,
i was reporting an infringing website about three weeks ago to abuse@vercel.com but have gotten any answer except the automated email with a case number. I tried reaching out again, with answering the email but still no answer. Does someone have experience with such kind of thing? How long should I wait or should I do something else?
Thanks
Hey @nino678190. Thanks for reporting a potentially harmful site. You did the right thing sending to our abuse investigation team. The team is working through a backlog so wait times are bit high at the moment. But if you share the ticket number, I can check on it for you 
In the future, you can make sure the team has all the info needed to take action ASAP by using the using the abuse reporting form at vercel.com/abuse
@amyegan The Abuse-Number is: 00487012
I am reporting a malicious Vercel-hosted endpoint:
https://ip-checking-notification-j2.vercel.app/api
This endpoint is referenced by a malicious GitHub repository:
https://github.com/DLabsHungary-Hub2/DLabs-Platform-MVP2
The repository contains backend code that:
- decodes the endpoint from AUTH_API in .env
- POSTs the full Node.js process environment (process.env) to the endpoint
- executes JavaScript returned by the endpoint using new Function(…)
Relevant repository files:
- server/routes/api/auth.js
- server/controllers/auth.js
- package.json
- .env
This behavior appears consistent with the malicious developer-repository campaign described by Microsoft on February 24, 2026:
https://www.microsoft.com/en-us/security/blog/2026/02/24/c2-developer-targeting-campaign/
Please investigate this deployment and any related projects or domains connected to it.
Have you reported this via the abuse form. It takes a while for Vercel to react. In my case it were 3-4 months