mango-ui-v2-teal[.]vercel[.]app

This domain is flagged for targeted crypto credential theft, specifically impersonating the Mango Markets platform to harvest wallet credentials and private keys. Analysis indicates a high-risk campaign designed to deceive users into disclosing sensitive authentication details through a fraudulent interface, potentially leading to unauthorized asset transfers or account takeovers. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 64.29.17.3, hosted on Amazon.com, Inc. infrastructure (AS16509). It was registered through Tucows Domains Inc. on February 21, 2026, with an SSL certificate issued by Google Trust Services (WR1). Despite zero detections in VirusTotal’s 95-engine scan, the domain appears on one security blocklist and is actively blocked by PhishDestroy. The page title explicitly mimics Mango Markets, reinforcing its impersonation strategy. Mitigation steps for this threat type include immediate verification of domain authenticity before entering credentials, cross-checking URLs against official sources, and enforcing multi-factor authentication for crypto wallet access. Users should avoid interacting with unverified interfaces, particularly those hosted on content delivery networks or subdomains. Organizations should monitor for similar impersonation patterns, such as mismatched SSL issuers or anomalous registration dates, and update blocklists to include this domain. Incident response teams should prioritize alerting users who may have engaged with the site and revoking exposed credentials.