console-chore-shellify-apps-chainlinklabs[.]vercel[.]app

The domain console-chore-shellify-apps-chainlinklabs.vercel.app is actively engaged in brand impersonation targeting Apple users for credential theft. Analysis confirms the domain is currently live and operational, presenting a high-risk threat to visitors through deceptive login interfaces mimicking legitimate Apple authentication portals. The page title 'Login – Vercel' further obscures its malicious intent by blending with legitimate cloud hosting services. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. on February 21, 2026, an unusually future-dated creation that may indicate automated abuse of domain registration systems. It resolves to IP address 198.169.2.129 (US, AS16509 Amazon.com, Inc.) and is secured with a Google Trust Services SSL certificate (WR1). Security telemetry shows 12 of 95 VirusTotal vendors flag the domain as malicious, while it appears on one additional security blocklist. Google Safe Browsing has classified this infrastructure as phishing, and independent threat feeds have confirmed its association with credential harvesting operations. The domain remains active as of this report, continuing to pose a significant risk to Apple customers and general internet users. Organizations should immediately block the domain and associated IP address at network perimeter controls. Users are advised to verify domain authenticity before entering credentials, particularly on pages hosted under cloud service subdomains. Security teams should monitor for similar patterns combining brand impersonation with Vercel-hosted infrastructure, as this represents an emerging trend in credential theft campaigns (seed: ccb5fb).