nft-giftbox6-eight[.]vercel[.]app

The domain nft-giftbox6-eight.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is hosted on the Amazon.com, Inc. network (AS16509) at IP address 64.29.17.67, a location identified as the United States. The site resolves to a Vercel‑hosted application that presents the page title "Deployment Unavailable" and returns HTTP status code 451, indicating that the content is unavailable for legal reasons. SSL termination is provided by Google Trust Services under the WR1 certificate, and the service advertises HSTS support. Google Safe Browsing flags the domain for social engineering, and both PhishDestroy and ScamSniffer have added it to their blocklists.

VirusTotal analysis shows that 14 of 93 security vendors have flagged the domain, reinforcing the malicious assessment. The domain appears on two additional security blocklists, confirming its inclusion in broader threat‑intel feeds. The identified scam type is an NFT scam, and the broader threat taxonomy classifies the activity as a crypto drainer, reflecting attempts to illicitly extract cryptocurrency assets.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor any outbound connections to the associated IP, and update endpoint detection signatures to include the observed SSL fingerprint and HTTP response pattern. Because the site is currently offline, investigators should retain the observed indicators for future correlation, and watch for potential re‑activation under the same or similar subdomains. Continuous verification with Google Safe Browsing and VirusTotal is recommended to capture any changes in detection status.