nftlucky-box13[.]vercel[.]app

This domain nftlucky-box13.vercel.app is assessed as infrastructure associated with a crypto drainer threat, which typically attempts to trick users into connecting cryptocurrency wallets and authorizing malicious transactions. Once a wallet is connected, the site may request permissions that enable unauthorized asset transfers, leading to irreversible financial loss. The current page status shows a deployment unavailable state, but the infrastructure remains active and is still considered risky due to repeated malicious classification signals across security systems.

Technical intelligence indicates multiple high-confidence risk markers. The domain has 18/95 security vendor detections on VirusTotal, indicating widespread disagreement among engines but a significant number of confirmed flags. It was created on February 21, 2026, making it a newly registered domain consistent with short-lived attack infrastructure. The registrar is Tucows Domains Inc., and hosting resolves to IP 64.29.17.67 under AS16509 (Amazon.com, Inc.). Additional indicators include SSL issued via Google Trust Services (WR1) and appearance on 5 security blocklists, reinforcing its malicious classification profile.

If a user interacted with this domain, immediate mitigation steps are recommended. Any connected wallets should be treated as compromised if approvals were granted, and revocation of token permissions should be performed without delay. Users should avoid re-accessing the domain and should check for unauthorized blockchain transactions. Browser sessions involving wallet extensions should be cleared or isolated, and devices should be scanned for potential persistence mechanisms. Given the combination of high detection rate, recent domain creation, and drainer-specific behavior, the infrastructure is considered high risk and actively unsafe for user interaction.