minting-box15[.]vercel[.]app

The domain minting-box15.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is currently listed as offline. Technical probing shows the name resolves to IP address 64.29.17.131, which belongs to the Amazon.com, Inc. network (AS16509) and is geolocated in the United States. The hosting environment identifies Vercel as the underlying platform, and the service presents an SSL certificate issued by Google Trust Services under the WR1 identifier, indicating a valid TLS chain. HTTP requests receive a 451 status code and the page title reports "Deployment Unavailable," confirming that the site no longer serves content.

VirusTotal analysis recorded 14 detections out of 93 scanning engines, reflecting a moderate consensus among security vendors that the domain is malicious. The domain appears on four public blocklists and is actively blocked by threat‑intelligence feeds including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The combined evidence points to a crypto‑drainer campaign, classified as a crypto scam, where attackers typically aim to exfiltrate digital asset credentials. While the domain is currently offline, the infrastructure—specifically the Vercel hosting and Amazon‑owned IP range—may be reused for future malicious deployments.

Defenders should continue to monitor the IP address 64.29.17.131 for any re‑activation, enforce blocklist updates, and ensure that any inbound connections to this host are denied. Additionally, security teams should flag any URLs that reference minting-box15.vercel.app in email or messaging filters, and consider tightening rules around newly registered .vercel.app subdomains originating from the same registrar. Ongoing intelligence gathering is recommended to detect potential re‑use of the same hosting profile in related campaigns.