doublezero-rewards[.]vercel[.]app

PhishDestroy identifies doublezero-rewards.vercel.app as an active fake rewards phishing domain posing elevated risk to end users.

This domain was flagged with a 2/95 detection rate on VirusTotal, registered through Vercel Inc., resolving to IP 64.29.17.3, and secured with a Google Trust Services SSL certificate. The domain appears on 2 separate security blocklists and is actively blocked by SEAL and MetaMask detection systems. Given the presence of a deceptive 'rewards' lure, the combination of low VirusTotal coverage and known blocklist inclusion elevates the risk profile for unsuspecting visitors.

The specific threat is a fake rewards phishing domain designed to mimic legitimate incentive programs and harvest user credentials or financial data. Technical indicators include the use of a trusted registry (Vercel) to host malicious content, combined with a valid SSL certificate from Google Trust Services to appear legitimate. Despite low detection coverage (2/95), the domain is flagged by high-confidence security systems including SEAL and MetaMask, indicating active malicious behavior. The IP address (64.29.17.3) and blocklist presence further support its classification as a phishing operation.

To mitigate risk from fake rewards phishing domains like doublezero-rewards.vercel.app, users should avoid clicking unverified links promising rewards or financial incentives. Always verify domains by checking for HTTPS, correct spelling, and official contact information. Organizations should deploy DNS-based threat intelligence feeds (e.g., SEAL) and browser extensions (e.g., MetaMask) that block known phishing domains. Security teams should investigate any internal access to this domain for signs of credential compromise or lateral movement.