Has anyone gotten a successful takedown escalation

Hi folks

I know the official channel is https://vercel.com/abuse (and that community mods can’t action takedowns). We’ve already used that path.

vercel.com

Dashboard

Context

Brand phishing on a *.vercel.app deployment (impersonating Despegar / travel brand) Harvests payment card data (fake checkout + fake 3DS OTP) and posts to a serverless /api/collect First reported via the Abuse form ~1 week ago Site is still live as of today (despegar.vercel.app) Deployment appears to have been updated around 2026-10-21 (possible redeploy after earlier reports) Looking at other threads here, delayed or unanswered phishing reports seem common.

Question for people who’ve dealt with this (esp. brand protection / fraud teams):

Has anyone actually gotten a phishing *.vercel.app taken down in a reasonable time? What made the difference — case number follow-up, trademark/DMCA category, more evidence, Enterprise support, public escalation, something else? Typical timeline when it does work? Is there a better path than the public abuse form for confirmed carding kits? Happy to share our case number privately with Vercel staff if that helps. Not asking the community to investigate the site — just looking for what has actually worked for others when the first report stalls.

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: vercel.com/abuse

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.