lucky-giftbox16[.]vercel[.]app

The domain lucky-giftbox16.vercel.app is identified as a high-risk generic phishing resource targeting users through fraudulent gift or reward schemes. Analysis confirms the domain is currently offline, though prior activity involved deceptive pages designed to harvest login credentials or personal data under false pretenses. No legitimate brand affiliation has been verified, though the structure mimics common incentive-based phishing campaigns. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. on February 21, 2026, and resolves to the IP address 64.29.17.131, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 intermediate. Detection metrics indicate 17 of 95 security vendors on VirusTotal flagged the domain as malicious, while five independent blocklists—PhishDestroy, Polkadot, Enkrypt, Codeesura, and PhishingDB—have actively blocked access. The page title 'Deployment Unavailable' suggests the resource was either taken down by the hosting provider or abandoned following detection. Current status confirms the domain is offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block the domain and associated IP at the network level, revoke any credentials potentially exposed through the site, and monitor for secondary phishing attempts leveraging similar naming conventions. Hosting providers should review the infrastructure for related malicious deployments, as this domain may be part of a broader campaign utilizing ephemeral subdomains for credential theft.