normdex[.]vercel[.]app

PhishDestroy identifies normdex.vercel.app as an active crypto drainer domain currently under investigation for impersonating Arbitrum. The threat is classified as a generic phishing operation with high potential for cryptocurrency theft through deceptive transaction signing. This domain was flagged by 6 of 95 VirusTotal security vendors despite resolving to IP 216.198.79.131 through Vercel Inc. registration. The SSL certificate is issued by Google Trust Services, which may provide a false sense of security. These technical indicators suggest either a very recent deployment or sophisticated evasion tactics in this drainer campaign. While on an active investigation status, normdex.vercel.app shows concerning attributes including zero initial detection despite sophisticated infrastructure components. Users should treat this as a confirmed drainer impersonating Arbitrum and avoid all interactions. Recommend immediate domain blocking, wallet transaction verification, and reporting through PhishDestroy's verification system to prevent cryptocurrency loss.