multichainbyzenoclaus[.]vercel[.]app

PhishDestroy identifies multichainbyzenoclaus.vercel.app as a live fake crypto airdrop scam impersonating a 'ZenOClaus' promotional giveaway. The site mimics legitimate blockchain projects to trick users into connecting wallets or sending cryptocurrency under the guise of a reward. Visitors are prompted to input wallet credentials or approve malicious token contracts, risking fund theft or credential harvesting. This domain was flagged with a current threat assessment of 'generic_phishing' and an active status. VirusTotal analysis shows 1/95 security engines flagged the domain at the time of review, indicating it evades immediate detection despite malicious behavior. The site operates under Vercel Inc.’s hosting service, leveraging Google Trust Services SSL certificates to appear legitimate. The IP resolution points to 216.198.79.131, a hosting provider commonly abused for short-lived phishing campaigns. While the registrar is not disclosed (Vercel domains are often auto-registered via Vercel Inc.), its infrastructure and SSL issuance suggest a well-crafted attempt to bypass traditional security filters. Users who visited this domain should immediately disconnect from the site, revoke any wallet connections made through the interface, and scan devices for malware using reputable antivirus tools. Never input private keys, seed phrases, or approve unknown token transfers. Report the domain to your wallet provider and consider transferring remaining funds to a new, secure wallet. Monitor blockchain activity for unauthorized transactions and enable hardware wallet signing for critical operations. If funds were lost, file a report with local cybercrime units and blockchain incident responders. Always verify crypto airdrop promotions through official project channels using verified social media or website links.