lucky-giftbox12[.]vercel[.]app

The domain lucky-giftbox12.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 216.198.79.67, which is owned by Amazon.com, Inc. (AS16509) and located in the United States. The site presents an HTTP 451 response code and the page title returned by the server is "Deployment Unavailable," indicating that the original Vercel deployment has been taken offline. The SSL certificate is issued by Google Trust Services under the WR1 descriptor, confirming the use of standard Google-managed TLS for the domain.

Infrastructure analysis shows the hosting platform is Vercel and the site enforces HTTP Strict Transport Security (HSTS). Threat intelligence from VirusTotal reports that 16 of 93 security vendors have flagged the domain as malicious, and the domain is listed on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—reinforcing the classification as a high‑risk phishing indicator. No additional content analysis is available because the site is currently offline, and the exact phishing payload or targeted brand has not been observed.

Given the combination of a recent registration, Amazon‑hosted IP, active TLS, Vercel hosting, and multiple vendor detections, defenders should treat lucky-giftbox12.vercel.app as a confirmed malicious indicator. Recommended mitigations include adding the domain and its resolved IP address to network deny lists, updating URL filtering rules to block the four listed blocklists, and monitoring for any re‑activation or new DNS records associated with the same IP or ASN. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in the threat posture.