maniventresync[.]on-fleek[.]app

The domain maniventresync.on-fleek.app is identified as a crypto recovery scam, specifically designed to impersonate legitimate blockchain support services. Analysis of the page title, 'Blockchain Rectification - We are here to help you resolve your crypto related issues,' indicates an attempt to deceive users into disclosing wallet credentials or transferring funds under false pretenses. The domain is currently offline, but prior activity aligns with known crypto drainer tactics targeting cryptocurrency holders seeking assistance. Infrastructure analysis reveals the domain was flagged by 19 of 95 security vendors on VirusTotal, with additional listings on six distinct security blocklists. It was registered through 1API GmbH and resolved to the IP address 104.26.12.141, hosted on Cloudflare's network (AS13335). The SSL certificate was issued by Let's Encrypt (serial number E8), a common choice for both legitimate and malicious domains. Detection engines such as PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura have explicitly blocked this domain, reinforcing its classification as high-risk. At present, maniventresync.on-fleek.app is offline, though its prior activity and infrastructure warrant continued monitoring. Users are advised to verify all blockchain support requests through official channels only. Any interaction with this domain—including cached or archived versions—should be treated as malicious. Wallet holders should review transaction histories for unauthorized activity and revoke permissions for any suspicious smart contracts associated with the domain. Security teams are encouraged to update blocklists with the provided indicators to prevent future exposure.