dapp-cusodjeqj-klimadao[.]vercel[.]app

The domain dapp-cusodjeqj-klimadao.vercel.app is identified as a phishing threat specifically targeting decentralized finance (DeFi) users by attempting to steal wallet credentials. This kind of attack typically involves spoofing legitimate decentralized applications (dApps) to trick users into inputting sensitive private keys or seed phrases, potentially leading to the theft of cryptocurrency assets.

PhishDestroy's investigation reveals that this domain is registered through Vercel Inc. and secured by a Google Trust Services SSL certificate, which can lend it a deceptive appearance of legitimacy. The domain resolves to IP address 216.198.79.3, and although VirusTotal reports 1 out of 95 antivirus engines detecting malware, the domain is currently blocked by major security tools including MetaMask and SEAL. Additionally, it appears on 2 known security blocklists, underscoring ongoing concerns about its malicious intent.

Users who have visited dapp-cusodjeqj-klimadao.vercel.app and entered any wallet credentials or private information should immediately consider those credentials compromised. It is crucial to move any digital assets to a new wallet with fresh private keys and monitor accounts for unauthorized transactions. Users should avoid interacting with suspicious dApp URLs and rely on official sources or verified browser extensions for accessing DeFi services. Regularly updating security software and using hardware wallets can further mitigate the risk of such phishing attacks.