Urgent request to suspend a phishing website hosted on vercel and has been reported multiple times.

Help
1

Dear Team,

The Group-IB Computer Emergency Response Team (CERT) has detected a phishing operation impersonating both the Royal Moroccan Football Federation (FRMF) and the Confederation of African Football (CAF).

Official websites:

https://www.cafonline.com/afcon2025/

https://www.frmf.ma

Malicious URL:

Phishing link

This domain is a clear counterfeit of CAF’s official ticketing platform. It is being used to fraudulently offer and sell tickets for the ongoing Africa Cup of Nations (AFCON 2025). The phishing site copies CAF’s branding and content to deceive users into submitting payment and personal information — resulting in direct financial theft and severe reputational damage to both CAF and FRMF.

The phishing website’s payment process deceives users to provide sensitive information like credit cards/banking information.
We confirm that this website has no affiliation with CAF or FRMF and is being used to facilitate fraudulent transactions.

Please note that the website owners have added a waiting Queue when you open the main URL: Main mailicious URL, which will redirect to a webpage that has (/home) mask showing 404 page not found page: (404 page not found mask), if you delete the mask content will appear normally.

The following link shows the content immediately (Phishing link).

Official CAF communication confirming legitimate ticketing is available here:

https://www.facebook.com/ConfederationAfricaineDeFootball/posts/pfbid022wG3ohktqjwY931yHzvrHPWYLorhpycgnAE8XnPsstbDne4d54kpLf2SC5ceUsNal

Also, please note that the other official way to get a visa and reserve a ticket for the CAF Africa Cup of Nations Morocco 2025 is through the YALLA application as mentioned in the CAF page, supported by the FRMF.

https://apps.apple.com/ma/app/yalla/id6752530336?l=ar

https://play.google.com/store/apps/details?id=ma.frmf.yalla&hl=en_US&pli=1

Group-IB is an authorized representative of the Fédération Royale Marocaine de Football (FRMF), Confederation of African Football and their ongoing tournament Africa Cup of Nations (AFCON 2025).

We have a good-faith belief that the use of the copyrighted and trademarked materials described above is not authorized by the copyright owner, its agent, or the law.

We kindly request that you suspend the domain v0-caf-tickets.vercel.app immediately due to its involvement in phishing, financial fraud, and brand impersonation.

Please note that we have reported this website several times on Report Abuse On Vercel phishing report form and we have made a previous post in (Urgent Request to takedown Phishing Website hosted on Vercel) and yet we haven’t received any confirmated actions on the provided resource.

We kindly request your urgent support to suspend the hosted domain as it is crucial and deceiving users in buying fake tickets for the ongoing Africa Cup of Nations Tournament.

Thank you for your cooperation and prompt attention to this matter.

Best regards,

2

There’s another community post with 404 debugging tips that might be helpful. Please give these solutions a try and let us know how it goes.

A human should be around soon to offer more advice. But you can also get helpful information quickly by asking v0.

5

Hi there!

Could you submit this form so that we get the right team looking at this?

7

Dear @pawlean,

I have submitted the phishing report on the dashboard multiple times.

Can we please expedite and escalate this case ?

Thanks in advance !