dao-app[.]minutodao[.]com

PhishDestroy identifies dao-app.minutodao.com as an active phishing domain posing as a DAO portal under investigation for credential harvesting fraud. This domain mimics MinuteDAO infrastructure to trick users into surrendering wallet credentials and private keys. All traffic to this host should be treated as malicious until further notice. dao-app.minutodao.com was registered through GoDaddy.com, LLC on May 04, 2025 — the same day it first resolved to IP 104.21.46.105. VirusTotal analysis shows 2/95 detections at the time of flagging, indicating delayed recognition by antivirus engines. The domain holds a valid SSL certificate issued by Google Trust Services, which does not guarantee legitimacy. No current listings on public blocklists (Google Safe Browsing, PhishTank, OpenPhish) were detected during the investigation window, suggesting this threat is still emerging and not yet widely mitigated by security vendors. Mitigation against this fake DAO phishing attack requires immediate DNS blocking of 104.21.46.105 and domain dao-app.minutodao.com at the network perimeter. Users who visited the site should revoke any wallet connections made through the fraudulent portal, check recent transaction history for unauthorized transfers, and perform a full malware scan. Organizations are advised to update email and web filtering rules to block inbound references to minuteDAO and related misspellings. Security teams should monitor internal DNS logs for recursive queries to this domain and isolate any endpoints that accessed it. Due to low antivirus detection rates, behavioral monitoring and user awareness training remain critical to prevent successful exploitation through social engineering.