gateway-spark-offer[.]vercel[.]app

The domain gateway-spark-offer.vercel.app is currently listed as a malicious phishing site in the internal threat catalog. VirusTotal records show that the domain has been submitted to 91 scanning engines, none of which reported a detection at the time of analysis. While the absence of detections does not constitute a safety guarantee, the lack of any positive result across a large vendor set is noteworthy.

The domain is actively blocked by the PhishDestroy sinkhole service and appears on a single external security blocklist, indicating that at least one third‑party provider has flagged it for abuse. No additional public data such as registrar information, IP address, hosting ASN, SSL certificate details, HTTP response codes, Safe Browsing status, Open Threat Exchange entries, or page title have been published in the available intelligence. Consequently, the full scope of the infrastructure behind the domain remains uncertain.

Defenders should treat any traffic to gateway-spark-offer.vercel.app as hostile, enforce network‑level blocks, and monitor DNS queries for related subdomains. Continuous re‑scanning with multiple sandboxes is advised to capture any future payload changes, and integration of blocklist feeds that include this domain will help reduce exposure. Until further evidence emerges, the domain should be considered an active phishing threat.