ecommarce-web[.]vercel[.]app

This domain, ecommarce-web.vercel.app, operates as a high-risk brand impersonation site targeting MetaMask users. The threat involves a fraudulent web interface designed to harvest cryptocurrency wallet credentials and private keys, enabling unauthorized access to victims' digital assets. Analysis indicates the site mimics MetaMask’s official login and transaction flows, potentially deploying crypto drainer scripts to siphon funds upon interaction. Infrastructure analysis reveals the domain is hosted on Vercel Inc. infrastructure, resolving to IP address 64.29.17.67 (AS16509, Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1). VirusTotal detection shows 12 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, and Google Safe Browsing classifies it as a phishing threat. No creation date is publicly available, but current indicators confirm active malicious use. Users who visited ecommarce-web.vercel.app should immediately revoke any wallet permissions granted during interaction. Disconnect the wallet from all decentralized applications (dApps) and transfer remaining assets to a new, secure wallet. Scan the device for malware using updated security tools. Report the incident to the targeted brand’s official abuse channels and monitor accounts for unauthorized transactions. If credentials were entered, assume full compromise and take corrective actions without delay.