private-wallet-service[.]vercel[.]app

The domain private-wallet-service.vercel.app was observed on August 03, 2026 as part of a crypto‑drainer campaign. The site is hosted on Vercel’s app platform, as indicated by the “vercel.app” suffix, which typically resolves to Vercel’s shared infrastructure. No WHOIS data or registrar information has been disclosed in the available intelligence, and no IP address or ASN details are currently associated with the domain in public scans.

The only concrete indicator is that the domain has been blocked by the PhishDestroy filtering service and is listed on a single security blocklist, confirming that at least one reputable anti‑phishing vendor has identified it as malicious. The lack of additional detections, SSL certificate details, HTTP response codes, or safe‑browsing verdicts means that the full operational profile of the site remains uncertain. Analysts should treat the domain as active and potentially capable of harvesting cryptocurrency credentials or redirecting victims to malicious wallets, consistent with the “crypto drainer” classification.

Defensive recommendations include adding the domain to local blocklists, configuring web‑filtering solutions to deny traffic to the host, and monitoring DNS queries for the domain or its sub‑domains. Continuous observation of threat‑intel feeds for new detections, registrar changes, or the emergence of associated IP addresses is advised to refine the risk assessment as further evidence becomes available.