mint-nftbox-orpin[.]vercel[.]app

PhishDestroy identifies mint-nftbox-orpin.vercel.app as an active NFT minting scam designed to deceive users into surrendering cryptocurrency wallet credentials. This domain mimics legitimate NFT project launchpads to harvest private keys, mnemonic phrases, or wallet connection requests under the guise of "exclusive mint access." The page typically loads a fake wallet-connect overlay that captures entered data before redirecting to an error page, leaving victims with drained wallets. This is not a theoretical threat; the domain is engineered to exploit user trust in NFT ecosystems during high-demand launches.

This domain was flagged by 14 of 95 VirusTotal security vendors and blocked by one major threat intelligence platform (OISD). It is hosted on Vercel Inc.’s infrastructure at IP 216.198.79.131 and uses a Google Trust Services SSL certificate to appear legitimate. Security researchers have confirmed that it impersonates a fake NFT minting platform, specifically targeting users expecting access to new collections. With both behavioral and infrastructure-based red flags present, the risk of interaction remains elevated until the domain is deactivated.

If you visited mint-nftbox-orpin.vercel.app, disconnect your wallet immediately and revoke any permissions granted. Use wallet software or blockchain explorers to check for unauthorized transactions or active session approvals. Change all wallet passwords and enable two-factor authentication. Report the domain to your antivirus provider and the hosting platform (Vercel Abuse Team). Do not reconnect to the site under any circumstances. Consider using hardware wallets for future minting and verify official project links through trusted social channels before entering any credentials.