chaindexweb.vercel.app 피싱 및 보안 점검

This domain, chaindexweb.vercel.app, poses as a legitimate decentralized application (dapp) operating under the guise of a 'leading synthetic protocol.' Analysis indicates it functions as a crypto drainer, designed to trick users into connecting their wallets and executing malicious transactions that siphon funds without consent. The site mimics the interface and branding of established synthetic asset platforms, exploiting trust in the DeFi ecosystem to facilitate unauthorized transfers of cryptocurrency assets. Infrastructure analysis reveals the domain was registered on April 07, 2026, through Vercel Inc., a hosting provider commonly used for both legitimate and malicious deployments. It resolves to the IP address 216.198.79.3 and holds an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. The domain is flagged by 3 out of 95 security vendors on VirusTotal and appears on 2 security blocklists. Additionally, it has been blocked by PhishDestroy and ScamSniffer, further corroborating its malicious intent. The Gridinsoft trust score of 0/100 underscores its high-risk classification. Users who have visited chaindexweb.vercel.app or interacted with its content should immediately revoke any wallet permissions granted to the site. Disconnect the wallet from all dapps using tools provided by wallet extensions or applications. Scan the device for malware using updated security software to ensure no secondary infections. Monitor wallet activity for unauthorized transactions and report any suspicious transfers to the relevant blockchain explorer or support channels. If funds were lost, file a report with local cybercrime authorities and provide transaction hashes as evidence. Avoid reusing passwords or recovery phrases associated with compromised wallets.