twq[.]vercel[.]app

The domain twq.vercel.app is currently flagged as a high-risk brand impersonation threat, specifically targeting the Ethereum brand. The site was created on May 22, 2026, and is hosted via Vercel Inc., a legitimate platform often abused by phishers. The page title shows "Redirecting...", suggesting it may redirect users to other malicious pages. No specific drainer kit has been identified in the available data, but the impersonation of a major cryptocurrency brand strongly indicates credential or wallet theft attempts.

Technical indicators reveal critical red flags. VirusTotal reports 11 out of 95 security vendors flagging this domain as malicious, providing a strong consensus of risk. The domain resolves to IP address 216.198.79.67 and uses an SSL certificate from Google Trust Services (WR1). It currently appears on 3 security blocklists. The registrar is Vercel Inc., and the domain creation date is May 22, 2026. Google Safe Browsing status is not explicitly stated, but the high blocklist count and VT scores suggest it may be listed. These indicators collectively point to an active phishing infrastructure designed to deceive users into revealing sensitive information.

As of this report, twq.vercel.app remains active and accessible, posing an ongoing risk to users who may encounter it through deceptive emails, ads, or search results. PhishDestroy recommends immediate blocking of this domain at the network level. Users should avoid interacting with the site and ensure their crypto wallets and credentials are secure. If any exposure has occurred, immediate password changes and wallet migration are advised. Further monitoring is required as the threat may evolve or redirect to other domains. The remaining risk is high due to the domain's active status and strong impersonation of a trusted brand like Ethereum.