# consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app — SUSPICIOUS

> Danger: consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app is hosting a crypto drainer site. 0 detections on VirusTotal.

## Summary
PhishDestroy identifies a new generic phishing campaign leveraging the Vercel-hosted domain consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app. Security telemetry and initial triage indicate the domain is actively impersonating a legitimate monorepo interface, likely targeting cryptocurrency wallets or exchange credentials. At the time of analysis, VirusTotal showed 0 out of 95 engines flagging the domain, and SSL certificates were issued by Google Trust Services, which may lend a false sense of legitimacy. The infrastructure sits behind IP 216.198.79.131, a hosting range commonly associated with dynamic content delivery networks.  This domain exhibits classic red flags consistent with credential harvesting or crypto-asset theft. Despite being unflagged on mainstream scanners, it was registered through Vercel Inc., a legitimate PaaS provider often abused for rapid deployment of malicious landing pages. The low detection count suggests either a very recent deployment or evasive infrastructure behavior. Given the naming pattern—consumer-monorepo-interface—this site may be mimicking a developer tool or internal dashboard to trick technical users into entering private keys or 2FA codes.  If you have visited consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app, treat it as a security incident immediately. Disconnect from untrusted networks, revoke any session tokens or API keys entered, and audit wallet extensions for unauthorized transactions. Enable transaction alerts where possible and consider transferring assets to a cold wallet pending further investigation. Report the domain to PhishDestroy using seed 537f82 to help block propagation. Monitor accounts closely for anomalous activity, especially in crypto or exchange-related logins.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Vercel Inc.
- IP: 216.198.79.131

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1bf93547-be13-4ae5-92a0-ff13a2dbf3ac
- PhishDestroy: https://phishdestroy.io/domain/consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/consumer-monorepo-interface-v2-52nafhpro-morpho-addmo.vercel.app/
Last updated: 2026-03-31