clone-vert-nu[.]vercel[.]app

PhishDestroy identifies clone-vert-nu.vercel.app as an active crypto drainer phishing domain designed to trick users into connecting fraudulent wallet addresses or revealing private keys. This site impersonates legitimate platforms by hosting a clone interface, aiming to siphon cryptocurrency from unsuspecting victims. The threat actor leverages Vercel’s hosting infrastructure and a Google-issued SSL certificate to appear credible, masking malicious intent behind a deceptive front-end. This domain was flagged by OpenPhish and appears on 1 security blocklist. VirusTotal analysis shows 19 out of 95 security vendors have detected malicious activity, including indicators of crypto-draining behaviors. Registered through Vercel Inc., the domain resolves to IP 216.198.79.3 and remains actively operational. Security researchers note its use in impersonation campaigns targeting crypto users through fake login portals or fraudulent transaction interfaces. If you visited clone-vert-nu.vercel.app or interacted with it, immediately disconnect your wallet and revoke any unauthorized connections. Scan your device for malware and monitor your crypto accounts for suspicious transactions. Report the domain to PhishDestroy to help protect others. Never enter credentials or connect wallets without verifying the site’s legitimacy through trusted sources.