# nodesdapp-resolverfixed.vercel.app — MALICIOUS

> Avoid nodesdapp-resolverfixed.vercel.app — a high-risk phishing site targeting crypto users. Do not interact; this domain is offline for safety.

## Summary
PhishDestroy identifies nodesdapp-resolverfixed.vercel.app as a high-risk generic phishing domain focused on cryptocurrency issues, particularly wallet support and blockchain rectification. The site’s page title attempts to lure victims by promising help with crypto-related problems, a common social engineering tactic in phishing schemes targeting digital asset holders.

Technical indicators reveal the domain was registered recently on March 2, 2026, through Vercel Inc., and resolved to IP address 64.29.17.3. It appears on one security blocklist and has a Gridinsoft trust score of 0/100, indicating strong suspicion. VirusTotal analysis flagged 14 out of 95 security vendors, underscoring the domain’s malicious intent. The use of a reputable cloud platform registrar likely aimed to lend credibility and bypass initial scrutiny.

Currently, nodesdapp-resolverfixed.vercel.app has been taken offline, mitigating immediate risk to users. PhishDestroy recommends maintaining vigilance for similar phishing attempts exploiting cryptocurrency themes and advises users to avoid interacting with domains exhibiting these red flags. Continuous monitoring and timely takedown actions are critical to prevent further victimization.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 451)
- Page title: Blockchain Rectification - We are help to help you resolve your crypto related issues One wallet, multiverse support

## Domain Intelligence
- Registered: 2026-03-02 15:00:01
- Registrar: Vercel Inc.
- Country: US
- IP: 64.29.17.3
- IP Country: US
- IP City: Walnut
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WR1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Netcraft", "OpenPhish", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019caecb-e1dd-751e-a0bd-faa20d941448.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5fdf1751-6453-40a8-ac5e-44a4788d3267
- Wayback Machine: https://web.archive.org/web/https://nodesdapp-resolverfixed.vercel.app
- PhishDestroy: https://phishdestroy.io/domain/nodesdapp-resolverfixed.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/nodesdapp-resolverfixed.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nodesdapp-resolverfixed.vercel.app/
Last updated: 2026-03-19