luckiestmint13[.]vercel[.]app

This domain, luckiestmint13.vercel.app, is identified as an active crypto drainer phishing site designed to illicitly extract cryptocurrency from victim wallets. Analysis indicates no direct brand impersonation; instead, the domain appears to host a generic drainer kit targeting users through deceptive transaction prompts or fake wallet interfaces. The infrastructure leverages Vercel's hosting platform, a common tactic to evade detection by blending with legitimate traffic. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 64.29.17.131, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain was registered on February 21, 2026, through Tucows Domains Inc. and remains active despite being flagged by Google Safe Browsing as phishing. VirusTotal reports 17 out of 95 security vendors detecting the domain as malicious, while three independent security blocklists—PhishDestroy, ScamSniffer, and PhishingDB—have listed it. The SSL certificate is issued by Google Trust Services (WR1), a detail often exploited to lend false legitimacy to phishing sites. Current status indicates the domain is still operational, posing a high risk to users interacting with cryptocurrency platforms. Response actions should include immediate blacklisting of the domain and IP across all network security controls, as well as monitoring for related subdomains or IP shifts. Users are advised to verify wallet addresses through trusted sources and employ hardware-based transaction signing to mitigate credential theft. The persistence of this domain, despite multiple detections, underscores the need for continuous threat intelligence updates and proactive blocking of newly identified drainer infrastructure.