nft-staking-app-app[.]vercel[.]app

This domain is assessed as HIGH risk and associated with a crypto_drainer operation targeting cryptocurrency wallet credentials through a counterfeit NFT staking interface. The infrastructure remains active, indicating ongoing potential for user interaction and asset theft.

Technical indicators show VirusTotal detection rate of 0/95, suggesting no automated antivirus classification at time of analysis despite active malicious behavior observed by blocklisting systems. The domain was created on April 27, 2026 and is currently active. It is registered via a major cloud-based hosting provider. Resolution points to IP address 216.198.79.195 located in the United States within hosting infrastructure. The domain appears on 3 security blocklists, indicating consensus-based threat identification by multiple independent security feeds. Certificate issuance is provided through a public certificate authority under WR1 chain, supporting HTTPS encryption for deception rather than legitimacy.

Mitigation requires immediate blocking at DNS and gateway layers due to confirmed crypto drainer behavior. Users should be warned against interacting with any NFT staking prompts, wallet connection requests, or signature approvals originating from this domain. Endpoint protection rules should flag and isolate connections to 216.198.79.195. Security teams should add the domain to deny lists and monitor for variants using similar naming patterns. Given its active status, continuous monitoring is required to detect re-deployment or infrastructure rotation.