Urgent Request to takedown Phishing Website hosted on Vercel

Help
1

Hello,

The Group-IB Computer Emergency Response Team (CERT) has detected a phishing operation impersonating both the Royal Moroccan Football Federation (FRMF) and the Confederation of African Football (CAF).

Official websites:

https://www.cafonline.com/afcon2025/

https://www.frmf.ma

Malicious domain:

v0-caf-tickets.vercel.app

This domain is a clear counterfeit of CAF’s official ticketing platform. It is being used to fraudulently offer and sell tickets for the ongoing Africa Cup of Nations (AFCON 2025). The phishing site copies CAF’s branding and content to deceive users into submitting payment and personal information — resulting in direct financial theft and severe reputational damage to both CAF and FRMF.

The phishing website’s payment process deceives users to provide sensitive information like credit cards/banking information.
We confirm that this website has no affiliation with CAF or FRMF and is being used to facilitate fraudulent transactions.

Official CAF communication confirming legitimate ticketing is available here:

https://www.facebook.com/ConfederationAfricaineDeFootball/posts/pfbid022wG3ohktqjwY931yHzvrHPWYLorhpycgnAE8XnPsstbDne4d54kpLf2SC5ceUsNal

Also, please note that the other official way to get a visa and reserve a ticket for the CAF Africa Cup of Nations Morocco 2025 is through the YALLA application as mentioned in the CAF page, supported by the FRMF.

https://apps.apple.com/ma/app/yalla/id6752530336?l=ar

https://play.google.com/store/apps/details?id=ma.frmf.yalla&hl=en_US&pli=1

Group-IB is an authorized representative of the Fédération Royale Marocaine de Football (FRMF), Confederation of African Football and their ongoing tournament Africa Cup of Nations (AFCON 2025).

We have a good-faith belief that the use of the copyrighted and trademarked materials described above is not authorized by the copyright owner, its agent, or the law.

We kindly request that you suspend the domain v0-caf-tickets.vercel.app immediately due to its involvement in phishing, financial fraud, and brand impersonation.

Please note that we have reported this website on Report Abuse On Vercel phishing report form and we haven’t received any confirmation or actions on the provided resource.

Thank you for your cooperation and prompt attention to this matter.

Best regards,

Urgent request to suspend a phishing website hosted on vercel and has been reported multiple times.
5

Hi,

Thanks for reporting. We have dedicated team to review this request and they will get back to you via email.

6

Dear @swarnava,

Please expedite the takedown action for the reported resource (//v0-caf-tickets.vercel.app).
It has been reported through the phishing abuse form since 28th of December and no actions have been taken.

This is very crucial for the CAF since many users are falling victims to the fake tickets being sold on the reported website that is targeting the on going Africa Cup of Nations tournament.

We appreciate expediting the required action the soonest due to its criticallity.

Thank in advance!

Regards,

7

Can you share the ticket ID? I will share internally

8

Hello @swarnava ,

The tickets ID are 00899417 and *00919203
*
Thank you for you help.

9

Hello @swarnava ,

Any update?