dapp-git-biwano-fixpriceperton-klimadao[.]vercel[.]app

PhishDestroy flags dapp-git-biwano-fixpriceperton-klimadao.vercel.app as an active phishing domain impersonating the Klimadao DeFi platform to harvest crypto wallet credentials. This elevated-risk threat leverages a fake decentralized application (dApp) interface to trick users into connecting their wallets under the guise of a legitimate carbon credit trading system. The domain was registered through Vercel Inc. and is currently hosted on IP 64.29.17.195, with a Google Trust Services SSL certificate in place to enhance its appearance of legitimacy.

This domain was detected by 3 of 95 VirusTotal security vendors and has been added to 2 threat intelligence blocklists. VirusTotal analysis indicates that the domain’s infrastructure shares characteristics with known phishing kits targeting blockchain users, while the inclusion on multiple blocklists—including detection by SEAL and MetaMask—validates its malicious intent. The domain resolves to a Vercel-hosted service, which may exploit legitimate cloud infrastructure to bypass traditional filtering measures. Its SSL certificate, issued by Google Trust Services, further increases the risk of user deception by presenting a false sense of security.

To mitigate exposure to this phishing threat, users should avoid interacting with the domain dapp-git-biwano-fixpriceperton-klimadao.vercel.app and immediately revoke any previously connected wallet permissions if credentials were entered. Blockchain users are advised to verify dApp URLs through official project channels and use wallet security features such as phishing domain protection in MetaMask. Organizations should update network blocklists with this domain and associated IP (64.29.17.195) to prevent inbound traffic. Always cross-check project communications via verified social media or official websites before engaging with crypto platforms.