mint-nft-box2-gamma[.]vercel[.]app

The domain mint-nft-box2-gamma.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is presently listed as offline. The site returns an HTTP 451 status code and its page title is "Deployment Unavailable," indicating that the underlying service is no longer accessible. Network analysis shows the domain resolves to IP address 216.198.79.195, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The TLS certificate presented is issued by Google Trust Services under the WR1 brand, confirming the use of a legitimate certificate authority but offering no indication of legitimacy for the hosted content.

Automated scanning on VirusTotal recorded 16 detections out of 93 security vendors, reflecting a moderate consensus that the domain is malicious. The domain appears on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—further corroborating its classification as a threat. Infrastructure fingerprints reveal the presence of Vercel hosting and HTTP Strict Transport Security (HSTS) headers, both common to legitimate services but also frequently leveraged by abuse operators to gain trust.

The threat type is identified as a crypto scam, specifically a crypto drainer, suggesting attempts to illicitly acquire cryptocurrency assets from victims. While the current offline status limits immediate interaction, defenders should continue to monitor the associated IP address and ASN for any re‑activation, enforce blocklist rules that include the identified domain and IP, and consider adding the domain to internal deny lists. Analysts should also verify whether any related subdomains share the same IP or certificate, as the infrastructure pattern may be reused in future campaigns.