mintptojects218[.]vercel[.]app

This domain, mintptojects218.vercel.app, operates as a crypto drainer, a threat designed to automatically siphon cryptocurrency from connected digital wallets without user consent. Analysis indicates the site targets users who initiate transactions or approve malicious smart contracts, resulting in irreversible asset loss. The threat leverages social engineering tactics, often impersonating legitimate blockchain projects or airdrop campaigns to deceive victims into interacting with the malicious interface. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain was created on February 21, 2026, and registered through Tucows Domains Inc., an atypical registrar for blockchain-related services. It resolves to IP address 216.198.79.131, hosted on Amazon.com, Inc. infrastructure (AS16509), and is flagged by 17 out of 95 security vendors on VirusTotal. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the threat, as the site has been blocked by PhishDestroy and PhishingDB, and appears on two additional security blocklists. The page title, 'Deployment Unavailable,' suggests an attempt to mask its true purpose or simulate a technical failure. If you visited mintptojects218.vercel.app or connected a wallet to it, immediate action is required. Disconnect the wallet from all decentralized applications (dApps) and revoke any suspicious smart contract approvals using a blockchain explorer or a dedicated revocation tool. Transfer remaining assets to a new, secure wallet address and monitor transaction history for unauthorized activity. Reset passwords and enable multi-factor authentication on associated accounts. Report the incident to relevant security teams and consider filing a complaint with local cybercrime authorities. Future interactions with unverified domains should be avoided, particularly those promising airdrops, token swaps, or other high-reward incentives.