drain-mvp-git-main-zhangs-projects-c2c3a872[.]vercel[.]app

PhishDestroy has identified a high-risk generic phishing threat targeting cryptocurrency users via the domain drain-mvp-git-main-zhangs-projects-c2c3a872.vercel.app. This domain appears to be a crypto drainer, likely designed to steal wallet credentials or trick users into signing malicious transactions. The domain was created on February 21, 2026, and is registered through Tucows Domains Inc., a known registrar. It resolves to IP address 64.29.17.67 and uses an SSL certificate issued by Google Trust Services (WR1), which may give it a false sense of legitimacy.

Technical indicators reveal that the domain has a VirusTotal score of 2 out of 95 security vendors flagging it as malicious, indicating it is a relatively new threat that has not yet been widely detected. It is currently listed on one security blocklist, but it is not yet blocked by Google Safe Browsing (GSB). The domain remains active and accessible, posing an ongoing risk to users who may encounter it through phishing emails, social media, or malicious advertisements.

As of the latest analysis, the domain is still active and has not been taken down. PhishDestroy recommends that users avoid interacting with this domain and report it to their security teams. Users should always verify URLs before entering credentials or connecting wallets, especially on sites that request sensitive information. For further protection, users can check domain safety using PhishDestroy's verification tool. The risk remains high due to the domain's active status and low detection rate, so continued monitoring and user education are essential.