nftmarketplace-thegraph[.]vercel[.]app

The domain nftmarketplace-thegraph.vercel.app is actively serving content and has been classified as a crypto drainer based on the presence of an Airdrop Scam phishing kit. Infrastructure analysis shows the site resolves to IP 64.29.17.195, a Vercel‑hosted address located in the United States. The domain was registered on April 27, 2026 through Vercel Inc., and the TLS certificate is issued by Google Trust Services under the WR1 profile, indicating a valid HTTPS endpoint. HTTP requests return a 200 status, and the site employs HSTS, confirming the use of secure transport. Nameserver information is unavailable (NS_NOT_FOUND), and the site is currently listed on three security blocklists, with confirmations of detection from PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score of 0/100 further underscores the malicious nature. While the page title "NFT Marketplace" is the only content identifier available, no additional page‑level analysis has been performed. Defenders should block the domain at the network perimeter, monitor outbound connections to the associated IP, and update endpoint protection signatures to include the identified kit and infrastructure patterns. Continuous observation is recommended to detect any changes in hosting or certificate attributes, and any user‑initiated interactions with the site should be logged for forensic review.