dapp-g0mp90q5z-klimadao[.]vercel[.]app

PhishDestroy identifies dapp-g0mp90q5z-klimadao.vercel.app as an active phishing domain masquerading as a legitimate Klimadao decentralized application (DApp). The site leverages the trusted Vercel.app domain hosting service to impersonate official Klimadao infrastructure, aiming to harvest user credentials and cryptocurrency wallet private keys under the guise of a climate-focused DeFi platform. This domain was flagged with an elevated risk level and remains active despite limited detection coverage. Security analysis shows it resolves to IP 64.29.17.67 and is registered through Vercel Inc., a legitimate hosting provider often abused by threat actors. Only 1 out of 95 VirusTotal security vendors currently detect this phishing attempt, highlighting the stealthy nature of this campaign. The domain employs a Google Trust Services SSL certificate to enhance credibility, while its subdomain structure (klimadao.vercel.app) attempts to exploit brand confusion with the legitimate klimadao.com platform. Users who visited this fake DApp should immediately disconnect from the site and revoke any permissions granted to connected wallets. Scan all connected devices for malware using reputable antivirus tools, as phishing pages often deploy keyloggers or browser extensions to steal credentials. Report the domain to your antivirus provider and avoid interacting with any subsequent communications from this source. Always verify DApp URLs through official Klimadao channels before entering sensitive information.