minting-box19[.]vercel[.]app

The domain minting-box19.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. Internal scans recorded fourteen of ninety-three VirusTotal security vendors flagging the host as malicious, indicating a moderate level of consensus among automated analysis tools. The site is served from the Amazon Web Services infrastructure (AS16509) and resolves to the IP address 216.198.79.195, which is geolocated to the United States. An SSL certificate issued by Google Trust Services (CN=WR1) secures the connection, and the server returned HTTP status code 451, denoting unavailable for legal reasons.

The page title presented at the address is "Deployment Unavailable," confirming that the front‑end is currently inactive. The domain is listed on four external blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, all of which have classified the host as a crypto‑drainer threat. Technology fingerprints reveal the use of Vercel hosting and enforcement of HTTP Strict Transport Security (HSTS).

Although the site is presently taken offline, the surrounding infrastructure—AWS hosting, a Google‑issued TLS certificate, and the Vercel deployment stack—suggests a rapid provisioning model often employed by opportunistic crypto‑drain campaigns. Defenders should continue to block the IP 216.198.79.195 and the domain minting-box19.vercel.app at perimeter devices, update URL filtering rules with the observed blocklist entries, and monitor for any re‑registration attempts or similar Vercel‑based subdomains that may reuse the same certificate or hosting profile. Correlation of future DNS queries against the AS16509 prefix and the identified TLS certificate fingerprint can aid in early detection of repeat abuse.