mint-nftboxx08[.]vercel[.]app

This domain, mint-nftboxx08.vercel.app, is identified as a high-risk brand impersonation threat specifically designed to facilitate NFT mint scams. Analysis indicates the infrastructure mimics legitimate NFT minting platforms, likely deploying a crypto drainer kit to siphon digital assets from victims. The domain exhibits characteristics typical of phishing campaigns targeting cryptocurrency users, including deceptive branding and transaction manipulation techniques.

Technical indicators confirm the domain's malicious nature. It is flagged by 11 out of 95 security vendors on VirusTotal, with registration handled through Tucows Domains Inc. The domain resolves to IP address 64.29.17.3, hosted on AS16509 (Amazon.com, Inc.) in the United States. Created on February 21, 2026, the domain appears on four security blocklists, including PhishDestroy and Polkadot. The SSL certificate is issued by Google Trust Services (WR1), and the page title displays 'Deployment Unavailable,' suggesting recent takedown or evasion efforts.

As of the latest assessment, mint-nftboxx08.vercel.app has been taken offline, likely due to enforcement actions or hosting provider intervention. Despite its current inactive status, residual risk remains for users who may have interacted with the domain prior to its removal. Organizations and individuals are advised to monitor transaction histories for unauthorized activity, revoke permissions granted to suspicious smart contracts, and implement enhanced verification protocols for NFT minting events. Continuous vigilance is recommended, as threat actors frequently re-deploy similar infrastructure under new domains.