web-dappfix-98n[.]netlify[.]app

The domain web-dappfix-98n.netlify.app was identified as a generic phishing threat with a high risk level, impersonating a blockchain rectification service under the page title 'Blockchain Rectification.' This type of phishing campaign typically targets cryptocurrency users by offering fake support or wallet recovery services, attempting to steal credentials or seed phrases. No specific drainer kit was identified, but the site's design and title strongly suggest an intent to harvest sensitive financial information from victims.

Technical indicators reinforce the malicious nature of this domain. VirusTotal flagged it with a score of 14/95 security vendors, indicating broad detection across the security community. The domain was registered through Netlify, a legitimate hosting provider often abused for quick phishing deployments, and it resolves to IP address 35.157.26.135. Created on May 09, 2018, the domain has a long history but was only recently weaponized for phishing. It appears on three security blocklists, and while its SSL certificate (issued by DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1) provides encryption, it does not validate the site's legitimacy. The domain was not found on Google Safe Browsing at the time of analysis.

The current status is offline, meaning the phishing site has been taken down, likely due to reporting or hosting provider action. However, the risk remains that similar domains may appear under the same Netlify subdomain pattern or with variations of the 'Blockchain Rectification' theme. Users should exercise caution with unsolicited blockchain support offers and avoid entering sensitive information on such sites. PhishDestroy recommends always verifying support channels through official sources and enabling multi-factor authentication on crypto wallets. If any credentials were entered, they should be changed immediately and wallets monitored for unauthorized transactions.