thorchain1[.]vercel[.]app

The domain thorchain1.vercel.app is currently active and hosts a page titled THORChain. Infrastructure analysis shows the domain resolves to IP address 216.198.79.67, which is associated with Amazon.com, Inc. (AS16509) in the United States. The site is served over HTTPS with a certificate issued by Google Trust Services under the WR1 profile, and the host platform is identified as Vercel with HTTP Strict Transport Security enabled. Reputation data indicates five of ninety‑one security vendors on VirusTotal flag the domain, and it appears on three independent blocklists (PhishDestroy, ScamSniffer, Enkrypt). The Gridinsoft trust score is 0 out of 100, reinforcing a high‑risk assessment. The documented scam type is a crypto drainer, suggesting attempts to illicitly obtain cryptocurrency assets from victims. Given the combination of a low trust score, multiple vendor detections, and inclusion on blocklists, defenders should block the domain and its associated IP at network perimeter and endpoint controls, add the host to URL filtering policies, and monitor for any related traffic patterns. Continuous re‑evaluation is advised as the threat actor may modify infrastructure or deploy additional domains.