arc-analytics-indol[.]vercel[.]app

This domain, arc-analytics-indol.vercel.app, is an active crypto drainer phishing site hosted on Vercel infrastructure. Registered on May 18, 2026, and currently resolving to 216.198.79.3 (US-based hosting), the domain presents itself as 'Arc Analytics | Testnet Monitor' according to its page title. Analysis indicates the site is designed to target cryptocurrency users, likely through fraudulent wallet-draining mechanisms. The domain is flagged on three security blocklists and is actively blocked by at least three security providers, including MetaMask and SEAL. Despite a clean scan from 92 vendors on VirusTotal, the absence of detections does not confirm safety, particularly given the domain's confirmed malicious classification elsewhere. The site employs HSTS and is served via a Google Trust Services SSL certificate (WR1), which may lend a false sense of legitimacy. Nameserver records are currently unresolved, a potential indicator of ephemeral or misconfigured infrastructure. Defenders should treat this domain as high-risk, particularly in environments where cryptocurrency transactions occur. Immediate blocking at the network and endpoint level is recommended, alongside monitoring for related subdomains or IP reuse. Further investigation into the wallet addresses or scripts hosted on this domain may reveal additional indicators of compromise.