codestashv2[.]vercel[.]app

The domain codestashv2.vercel.app is identified as a high-risk crypto drainer, a specific type of phishing threat that aims to steal cryptocurrency from users. The domain is currently active and has not been flagged by any of the 95 vendors on VirusTotal, indicating a potential new or sophisticated threat.

Analysis indicates that the domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.195. The domain was created on June 12, 2026, and currently appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Despite the lack of detections on VirusTotal, the domain's presence on multiple blocklists suggests a level of malicious activity. The SSL certificate is issued by Google Trust Services / WR1, which can sometimes lend a false sense of security to unsuspecting users.

Given the current active status and the absence of VirusTotal flags, it is crucial for users and security teams to exercise heightened caution. Recommendations include blocking the domain at the network level, educating users about the risks of crypto drainers, and monitoring for any unauthorized transactions. Additionally, continuous monitoring of the domain's activity and updates to security blocklists should be implemented to prevent potential compromises.