claim-marvin[.]vercel[.]app

This domain, claim-marvin.vercel.app, operates as a crypto drainer phishing site designed to compromise cryptocurrency wallet credentials and execute unauthorized transactions. The page, titled Marvin Inu Hunt, employs social engineering tactics to trick users into connecting their wallets, where malicious JavaScript scripts automatically siphon funds to attacker-controlled addresses. The threat specifically targets users of decentralized finance platforms, leveraging fake token airdrop claims to facilitate credential harvesting and asset theft. Analysis indicates the domain was registered on February 21, 2026, through Tucows Domains Inc., and currently resolves to IP address 64.29.17.3, hosted by Vercel, Inc. in the United States. Security vendor detection remains low, with only 1 out of 95 engines on VirusTotal flagging the domain as malicious. However, the domain appears on two independent security blocklists, including PhishDestroy and ScamSniffer, suggesting validated malicious activity. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the inherent risk posed by the site's operational infrastructure. Users who have interacted with claim-marvin.vercel.app should immediately revoke any wallet permissions granted to the domain. Disconnect all connected wallets from decentralized applications and review transaction histories for unauthorized activity. Scan local devices for malware using updated security tools, as phishing sites may deploy additional payloads. Report the incident to relevant blockchain security platforms and monitor accounts for suspicious transactions. If funds were transferred, document transaction hashes and contact the affected wallet provider or exchange for potential recovery options.