frtt-gamma[.]vercel[.]app

PhishDestroy identifies the active domain frtt-gamma.vercel.app as a crypto-draining phishing host targeting unsuspecting cryptocurrency users. Security telemetry confirms the site remains live and is actively attempting to siphon digital assets from victims who interact with its fraudulent interfaces.

This domain was flagged by 9 of 95 VirusTotal vendors upon submission, indicating early-stage detection of its malicious intent. It resolves to IPv4 address 64.29.17.67 and is currently deployed on Vercel infrastructure under US jurisdiction, leveraging Google Trust Services SSL certificates to appear legitimate. Telemetry correlates this host with an emerging cluster of crypto-draining domains, where attackers impersonate legitimate services to trick users into connecting wallets or approving fraudulent transactions.

Given its elevated risk status and confirmed hostile behavior, all network defenses should immediately block 64.29.17.67 and frtt-gamma.vercel.app at perimeter and endpoint levels. SOC teams should also inspect DNS logs for any resolutions to frtt-gamma.vercel.app within the last 72 hours and notify end users who may have accessed the domain. Implement strict egress controls to prevent wallet-connecting domains from reaching external endpoints to mitigate further loss of funds.