mint-nft-box9[.]vercel[.]app

Analysis of mint-nft-box9.vercel.app confirms its classification as a high-risk crypto drainer scam, currently offline as of July 25, 2026. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolves to IP 216.198.79.131, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The site returns an HTTP 451 status ('Deployment Unavailable') and presents a page title of the same name, indicating it may have been disabled or taken down by the hosting provider, Vercel, which is detectable in the site's technology stack alongside HSTS enforcement. Infrastructure analysis reveals the domain is flagged by 15 of 93 security vendors on VirusTotal, though the specific detection rules are not disclosed.

It appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, which specialize in cryptocurrency-related threats. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the risk, as fraudulent domains frequently leverage valid certificates to appear legitimate. The scam type is explicitly identified as a crypto scam, consistent with the domain's naming pattern ('mint-nft-box9') and its presence on cryptocurrency-focused blocklists.

While the exact content of the site remains unanalyzed due to its offline status, the combination of hosting on a cloud provider, recent registration, and targeted blocklist inclusions strongly supports its role in cryptocurrency theft. Defenders should treat this domain as malicious, block all resolutions at the DNS level, and monitor associated IPs for lateral movement or re-emergence under new subdomains. The absence of active content prevents further behavioral analysis, but historical indicators—such as the HTTP 451 status—suggest potential takedown efforts by the hosting provider or law enforcement.