hedera-dao[.]vercel[.]app

The domain hedera-dao.vercel.app has been identified as a generic phishing threat, specifically targeting users of the Hedera DAO ecosystem. The site presents itself as a 'Hedera DAO Assistant' to lure victims into revealing sensitive information or connecting their wallets. While no specific drainer kit has been confirmed, the phishing page is designed to harvest credentials or private keys, posing a significant risk to crypto users.

Technical indicators paint a clear picture of malicious intent. VirusTotal shows 12 out of 95 security vendors flagging this domain, a strong signal of its dangerous nature. Google Safe Browsing also flags it for phishing. The domain was registered on February 21, 2026, through Tucows Domains Inc., and resolves to IP address 64.29.17.195. It appears on one security blocklist and uses an SSL certificate from Google Trust Services (WR1), which can give a false sense of legitimacy.

As of now, the domain remains active and continues to pose a threat. PhishDestroy recommends blocking this domain immediately and advising users not to visit the site or enter any information. Users who have interacted with the page should change their passwords and revoke any wallet permissions. Ongoing monitoring is advised as the domain may evolve or spawn similar threats.