mlens[.]ai

This domain, mlens.ai, is flagged as a phishing site designed to steal cryptocurrency wallet credentials and private keys. Analysis indicates it mimics legitimate token management platforms, tricking users into entering sensitive information that attackers then exploit to drain funds. The site specifically targets users of decentralized finance (DeFi) applications, employing social engineering tactics such as fake airdrop claims or urgent wallet verification prompts to lower victim vigilance. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Cloudflare, Inc., and currently resolves to the IP address 216.150.1.1. Despite having 0 detections out of 95 engines on VirusTotal, it appears on three security blocklists and is actively blocked by multiple wallet protection tools. The site uses a Let's Encrypt SSL certificate, Vercel hosting, and enforces HSTS, which may lend a false sense of legitimacy to unsuspecting visitors. The page title, mlens.ai/, is minimal and lacks distinguishing features, a common trait in hastily deployed phishing infrastructure. If you visited mlens.ai or entered any credentials, immediately disconnect the device from the internet to prevent data exfiltration. Revoke all active wallet sessions and transfer remaining funds to a new, secure wallet address. Monitor connected accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the incident to your wallet provider and relevant security teams to aid in takedown efforts. Avoid interacting with any links or prompts from the domain, as they may still be active in cached or mirrored forms.