mintcampaign4[.]vercel[.]app

Analysis of mintcampaign4.vercel.app as of July 29, 2026 indicates that the domain is actively used in a crypto‑drainer campaign. The domain is hosted on Vercel Inc., a legitimate platform that frequently provides short‑lived deployment environments. DNS resolution points to the IPv4 address 216.198.79.195, and a nameserver lookup returned NS_NOT_FOUND, suggesting that the authoritative name servers are not publicly disclosed or have been removed. The lack of visible nameserver information hampers attribution of the hosting infrastructure.

Reputation services have identified the domain on three security blocklists, and it is explicitly blocked by the anti‑phishing tools PhishDestroy, MetaMask, and SEAL, indicating that it has been observed delivering malicious content aimed at cryptocurrency wallets. VirusTotal scanned the domain and recorded detections from two of ninety‑one security vendors, confirming that at least some scanners recognize malicious behavior. No additional details such as SSL certificate properties, HTTP status codes, or page titles are available in the current intelligence set. The available evidence points to a high likelihood that the site is being used to lure victims into authorizing transactions that transfer cryptocurrency assets to attacker‑controlled addresses.

However, the exact phishing vector, payload delivery method, and the identity of the operators remain unknown due to limited public artifacts. Defenders should block network traffic to 216.198.79.195, add the domain to local deny lists, and monitor for any wallet connection attempts that involve this hostname. Users of wallet extensions should be reminded that MetaMask already flags this domain, and they should avoid approving any transaction prompts originating from it. Continuous monitoring of the domain’s status on blocklists and periodic rescans with sandbox services are recommended to detect any evolution in the threat.