nft-canvas-project[.]vercel[.]app

PhishDestroy identifies nft-canvas-project.vercel.app as an active crypto drainer domain designed to trick users into connecting cryptocurrency wallets under the guise of an NFT canvas project. Once connected, the site attempts to drain tokens and NFTs by exploiting wallet permissions or tricking users into signing malicious transactions. This threat is particularly dangerous for users unfamiliar with crypto wallet security, as drainers often mimic legitimate NFT minting or airdrop websites to gain access to digital assets. This domain was flagged by PhishDestroy after analysis revealed it has 0 detections on VirusTotal out of 95 security vendors, meaning no antivirus or security tool has yet flagged it as malicious. It was registered through Vercel Inc., a legitimate hosting provider, which is commonly abused to host malicious sites due to Vercel’s free and rapid deployment capabilities. The domain resolves to IP address 216.198.79.195 and uses a Google Trust Services SSL certificate, making it appear legitimate at first glance. Despite its professional appearance, the domain’s purpose aligns with known crypto drainer tactics observed in recent campaigns targeting NFT enthusiasts. If you visited nft-canvas-project.vercel.app, immediately revoke any wallet connections made on the site through your wallet provider’s settings (e.g., MetaMask, Phantom) and transfer remaining assets to a new wallet. Do not interact with any transaction prompts or approve unknown permissions. Run a full antivirus scan on your device and consider reporting the domain to PhishDestroy or relevant cybersecurity authorities. Always verify links via official project channels before engaging with NFT-related websites.