minipay-hackathon[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat specifically targeting MetaMask, a widely used cryptocurrency wallet. The site mimics legitimate wallet interfaces to deceive users into disclosing sensitive credentials or authorizing malicious transactions, potentially leading to unauthorized asset transfers or account compromise. Analysis indicates the domain minipay-hackathon.vercel.app was registered on March 13, 2026, through Vercel Inc. and resolves to the IP address 64.29.17.67, hosted on Amazon.com, Inc. infrastructure (AS16509). The SSL certificate is issued by Google Trust Services (WR1). VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious. It appears on three security blocklists and is actively blocked by multiple threat intelligence platforms. Infrastructure analysis reveals the domain remains operational despite detection. Mitigation steps for this type of threat include immediate blocking of the domain and its associated IP (64.29.17.67) at the network perimeter. Users should be advised to verify wallet addresses and transaction details before execution, particularly when prompted by unsolicited links. Organizations should monitor for outbound connections to the domain or IP and review logs for signs of credential harvesting or unauthorized transaction attempts. Security teams are recommended to update detection rules to include this domain and its indicators in threat feeds.