dapp-pfkrbctv5-klimadao[.]vercel[.]app

This domain is a fraudulent replica of the Klima Protocol platform, designed to deceive users into submitting sensitive credentials or cryptocurrency wallet details. Analysis indicates the site mimics the legitimate Klima Protocol interface, a platform for carbon markets, with an identical page title: 'Klima Protocol | Open Infrastructure for Carbon Markets.' The infrastructure is hosted on Vercel, a common vector for phishing due to its ease of deployment and free SSL certificates, which lend an air of legitimacy to malicious sites.

Evidence confirms the domain's malicious nature through multiple technical indicators. The domain, registered through Vercel Inc. on March 31, 2026, resolves to IP address 216.198.79.67, located in the United States under Cypress Communications, LLC. It is flagged by 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 1 out of 95 security vendors detecting the domain as malicious. The SSL certificate, issued by Google Trust Services (WR1), further obfuscates its true intent by providing encrypted connections, a tactic often exploited to evade basic security checks.

Users who have visited this domain should immediately revoke any permissions granted to connected wallets or applications. If credentials or wallet details were entered, affected parties must transfer assets to a new, secure wallet and monitor for unauthorized transactions. Browser data, including cookies and cached files associated with the domain, should be cleared to mitigate persistent tracking or session hijacking risks. Organizations are advised to update their blocklists with this domain and its resolving IP to prevent further exposure.