arcium-top-chad-gallary[.]vercel[.]app

This domain, arcium-top-chad-gallary.vercel.app, is flagged as an active credential theft phishing site designed to harvest user login credentials. Analysis of the page title, 'Purple Dream Gallery,' suggests an attempt to impersonate a legitimate gallery or digital asset platform, potentially targeting users seeking access to exclusive content or services. The infrastructure lacks overt indicators of a crypto drainer kit but exhibits characteristics consistent with credential harvesting, including form-based data capture mechanisms observed in preliminary sandbox analysis. Technical indicators reveal the domain is hosted on Vercel Inc. infrastructure and resolves to IP address 216.198.79.131, geolocated within the United States under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common feature in both legitimate and malicious deployments. Detection metrics show a VirusTotal score of 2/95, indicating limited but present identification by security vendors. The domain appears on one security blocklist and is currently classified as active. No creation date metadata is available through public WHOIS or passive DNS records, limiting temporal attribution. Current status confirms the domain remains operational, with no takedown or sinkholing actions observed as of analysis. The registrar, Vercel Inc., has not issued a public response or suspension notice. Remaining risk is assessed as high due to the domain's active credential harvesting capability, low detection rate, and hosting on a platform frequently exploited for rapid deployment of phishing pages. Users are advised to avoid interaction with the domain, verify URLs through official sources, and employ multi-factor authentication to mitigate credential exposure risks. Network-level blocking of the IP 216.198.79.131 is recommended for enterprise environments.