aitrader-repo[.]vercel[.]app

This domain is assessed as a high-risk generic phishing infrastructure with potential credential theft and crypto-related user targeting. Analysis indicates that aitrader-repo.vercel.app presents a misleading interface labeled as CODE COMPILER, which may be used to entice users into executing or interacting with malicious workflows designed to harvest sensitive credentials or trading-related authentication data. The risk level is classified as high due to multi-source blocklisting and hosting patterns associated with deceptive application delivery.

Infrastructure analysis reveals VirusTotal detection at 0/95 security vendors, indicating no automated antivirus detections at the time of analysis. The domain is registered through Vercel Inc. It resolves to IP address 216.198.79.195, with IP location identified in the US under AS16509 Amazon.com, Inc. The SSL certificate is issued by Google Trust Services / WR1. The domain appears on 3 security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, confirming external behavioral or heuristic-based detection despite zero VT flags.

Mitigation guidance recommends avoiding any interaction with the CODE COMPILER interface, particularly any requests involving wallet connections, private keys, or authentication inputs. Users should not execute copied scripts or code from the domain. If interaction has occurred, credentials associated with trading or crypto services should be rotated immediately, and sessions should be invalidated. Monitoring for unauthorized transactions or account access is advised, as infrastructure suggests active deployment and potential ongoing risk despite lack of VirusTotal detections.