lucky-giftbox1[.]vercel[.]app

On 23 July 2026, analysis of the domain lucky-giftbox1.vercel.app identified it as a high‑risk phishing infrastructure that is currently offline. The site presented the page title “Deployment Unavailable” and responded with HTTP status code 451, indicating a legal restriction response. The domain was registered on 21 February 2026 through Tucows Domains Inc., and the underlying host resolves to the IPv4 address 64.29.17.195, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. TLS negotiation uses a certificate issued by Google Trust Services under the WR1 identifier, confirming the presence of a valid HTTPS endpoint.

Fingerprinting tools detected the Vercel hosting platform and the presence of HTTP Strict Transport Security (HSTS) headers. Threat‑intelligence feeds have added the domain to four blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating consensus among independent security providers that the domain is malicious. VirusTotal scans returned 14 positive detections out of 95 antivirus engines, reinforcing the malicious classification. No additional contextual information such as a specific brand lure or phishing kit is available beyond the generic page title.

Given the current offline status, active mitigation should focus on pre‑emptive blocking of the domain and its associated IP address at network perimeter devices. Security teams should also incorporate the four blocklist identifiers into URL filtering policies and monitor for any re‑activation of the Vercel deployment. Continuous re‑scanning of the domain on VirusTotal and periodic WHOIS checks are recommended to detect potential changes in registration or hosting that could indicate a resurgence of activity.