nft-giftbox4-roan[.]vercel[.]app

Analysis of the domain nft-giftbox4-roan.vercel.app indicates a confirmed NFT crypto drainer scam, currently offline as of July 23, 2026. The domain, registered on February 21, 2026, through Tucows Domains Inc., was hosted on Amazon Web Services (AS16509) at IP 216.198.79.67, located in the United States. Infrastructure analysis reveals the use of Vercel for deployment, a common platform for rapid scam site hosting, alongside HTTP Strict Transport Security (HSTS) enforcement, which may have been employed to lend an appearance of legitimacy. The domain's SSL certificate is issued by Google Trust Services (WR1), a standard provider, offering no immediate red flags beyond its use in this context. Google Safe Browsing classified this domain under social engineering, a designation consistent with crypto drainer schemes that manipulate victims into connecting wallets or authorizing transactions.

The domain appears on one security blocklist, specifically PhishDestroy, and was flagged by 16 of 93 security vendors on VirusTotal, though the absence of additional context limits the granularity of these detections. The HTTP status code 451 (Unavailable For Legal Reasons) suggests the site was taken down following enforcement action or abuse reporting, though the exact timeline and responsible party remain unclear. The page title 'Deployment Unavailable' further corroborates the site's offline status, though it provides no insight into the prior content or functionality. The scam type is explicitly categorized as an NFT scam, aligning with the domain name's suggestive phrasing ('giftbox4'), which often implies false incentives such as free NFTs or airdrops.

While the exact mechanics of the drainer are not documented in available intelligence, the combination of hosting on Vercel, social engineering flags, and crypto-focused nomenclature strongly supports this classification.