metacommunity-dev[.]vercel[.]app

This domain, metacommunity-dev.vercel.app, is identified as a high-risk cryptocurrency phishing site designed to harvest wallet credentials and private keys. Analysis indicates the infrastructure was configured to mimic legitimate decentralized application (dApp) frontends, likely employing a wallet drainer kit to automate fund transfers upon victim interaction. The domain exhibits no overt branding affiliation, suggesting a generic or opportunistic phishing campaign rather than a targeted impersonation of a specific platform. Infrastructure analysis reveals multiple technical indicators corroborating malicious intent. The domain is flagged by 10 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly classifying it as phishing. It resolves to the IP address 64.29.17.131, hosted within Amazon.com, Inc.'s autonomous system AS16509 in the United States. The domain is registered through Vercel Inc., a common hosting provider for rapid phishing deployments due to its ease of use and ephemeral subdomain capabilities. It appears on at least one security blocklist, specifically PhishDestroy, and presents a 404: NOT_FOUND page title, a pattern often observed post-takedown or during dormant phases of phishing campaigns. As of the latest assessment, metacommunity-dev.vercel.app has been taken offline, likely following abuse reports or automated detection mechanisms. However, residual risk persists due to the transient nature of such domains. Historical DNS records and SSL certificate transparency logs (Google Trust Services / WR1) may retain artifacts that could aid in tracking related infrastructure. Users who interacted with this domain prior to its takedown are advised to immediately revoke any connected wallet permissions, transfer assets to a new wallet, and monitor transaction histories for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.