chiliz-pi[.]vercel[.]app

PhishDestroy has identified chiliz-pi.vercel.app as an active phishing domain engaged in brand impersonation, specifically targeting Telegram users. The site presents itself under the title "Chiliz" to deceive visitors into believing it is a legitimate Telegram-related service, likely aiming to steal login credentials or sensitive personal information. This threat is classified as high risk due to its active status and the credibility of the impersonated brand.

Technical analysis reveals that chiliz-pi.vercel.app was registered through Vercel Inc. and created on January 28, 2020, though its malicious use appears recent. The domain resolves to IP address 216.198.79.131 and uses an SSL certificate issued by Google Trust Services (WR1). VirusTotal reports that 15 out of 95 security vendors flag this domain as malicious, and it appears on 3 security blocklists. Despite these indicators, the site remains active and accessible, underscoring the urgency of user vigilance.

As of the latest check, chiliz-pi.vercel.app is still online and serving its phishing content. PhishDestroy recommends that users avoid interacting with this domain entirely. If you have already submitted any credentials, change your Telegram password immediately and enable two-factor authentication. Report the domain to Vercel for abuse and to Google Safe Browsing for further blocking. The primary risk is credential theft, but secondary risks include malware distribution or further social engineering attacks. Stay alert and verify URLs before entering sensitive information.