airpuff-vectis-ui[.]vercel[.]app

The domain airpuff-vectis-ui.vercel.app has been identified as an active crypto drainer infrastructure, currently under investigation as a confirmed phishing threat. This malicious domain lures users into connecting crypto wallets under the guise of a legitimate interface, enabling unauthorized fund transfers. The threat remains active, with no current blocklist presence despite its operational status.

PhishDestroy confirms this domain poses a significant risk, evidenced by its SSL certificate issued by Google Trust Services, resolution to IP 216.198.79.3, and registration through Vercel Inc. Virustotal scans reveal a concerning lack of detections, with 2 out of 95 security vendors flagging the domain at present. These attributes—combined with the platform’s reputation as a legitimate deployment service—further complicate early detection and mitigation efforts.

Users are strongly advised to avoid interacting with airpuff-vectis-ui.vercel.app or any linked platforms. Verify domain legitimacy through PhishDestroy’s threat intelligence feeds prior to engagement. Report suspicious activity immediately to disrupt ongoing campaigns. Security teams should block this IP (216.198.79.3) and domain at network gateways while investigating historical connection logs for potential compromise.