behav-repeat-7829-7p46[.]vercel[.]app

PhishDestroy identifies a recently active crypto drainer hosted at behav-repeat-7829-7p46.vercel.app. This domain mimics legitimate services to trick users into connecting cryptocurrency wallets, enabling unauthorized fund transfers once access is granted. The threat is currently classified as elevated due to its active status and confirmed malicious activity across multiple security platforms. This domain was flagged by 13 out of 95 VirusTotal security vendors, indicating widespread detection of its malicious intent. Registered through Vercel Inc., the domain leverages a Google Trust Services SSL certificate to appear legitimate, resolving to IP address 216.198.79.67. Its creation date falls within a recent window, suggesting a campaign designed to capitalize on current events or ongoing scams. If you visited this domain or entered any information, disconnect your wallet from the site immediately and revoke any unauthorized permissions. Do not interact further with the domain or its associated links. Report the activity to your organization’s SOC or relevant cybersecurity authorities. Maintain vigilance for unusual wallet transactions or unauthorized access attempts.