lucky-box25[.]vercel[.]app
“Deployment Unavailable”
lucky-box25.vercel.app — Contenuto non disponibile. Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 17/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, ArcSight Threat Intelligence, BitDefender); Google Safe Browsing flagged; 3 external blocklist matches (Polkadot, Enkrypt, Codeesura); PhishDestroy score 95/100. Registrar: Tucows.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain lucky-box25.vercel.app has been identified as a high-risk credential theft operation. This domain, which was created on February 21, 2026, utilizes infrastructure that potentially targets sensitive user credentials. It does not currently impersonate any specific brand, nor is there evidence of a drainer kit associated with cryptocurrency. However, the high number of security vendor detections indicates malicious intent related to phishing activities.
Technical analysis of lucky-box25.vercel.app reveals several concerning indicators. VirusTotal scores this domain at 17/95, reflecting detection by multiple security vendors. This domain was registered through Tucows Domains Inc., and resolves to the IP address 64.29.17.195, located in the United States managed by Amazon.com, Inc. Google's Safe Browsing has flagged this domain as phishing, and it appears on five distinct security blocklists including PhishDestroy, Polkadot, Enkrypt, Codeesura, and PhishingDB. The SSL certificate is issued by Google Trust Services WR1, which potentially lends unwarranted legitimacy to the site.
Currently, lucky-box25.vercel.app is offline, reducing the immediate risk to users. However, the threat level remains high due to its previous activity and the potential for reactivation under new infrastructure. Organizations and individuals are advised to update blocklists and security measures to prevent similar phishing threats. Continuous monitoring for domains with similar characteristics or registration patterns can help mitigate future risks. Awareness and education on the dangers of credential theft should be reinforced among users to prevent data compromise.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 2 identified
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of lucky-box25.vercel.app · checked Mar 2, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo