bronze-arc-atom[.]vercel[.]app

Analysis of bronze-arc-atom.vercel.app shows that the domain was registered through Tucows Domains Inc. on February 24, 2026. The site resolves to the IP address 64.29.17.195, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. SSL is provided by Google Trust Services under the WR1 certificate, indicating a valid TLS chain but offering no assurance about the content hosted behind the certificate. The HTTP response returns a 404 status code, and the domain is currently reported as taken offline.

Automated scanning on VirusTotal recorded 14 positive detections out of 93 security vendors, a signal that multiple independent scanners have identified malicious characteristics. The domain appears on three external blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, further corroborating its classification as a phishing vector. Infrastructure fingerprints include the Vercel hosting platform and the presence of HTTP Strict Transport Security, both of which are commonly used by legitimate services and by threat actors to lend credibility to malicious pages. The page title returned by the server is the raw domain string "bronze-arc-atom.vercel.app", providing no additional context about the intended target or content.

Because the site is offline, direct observation of payloads or credential‑stealing pages is not possible, leaving the exact phishing campaign details unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑activation or redeployment of the same hostname, and consider adding the IP address to reputation lists. Ongoing vigilance is advised given the recent creation date and the existing detection footprint.