nft-giftbox4-roan[.]vercel[.]app
“Deployment Unavailable”
nft-giftbox4-roan.vercel.app — Conteúdo indisponível. Tipo de golpe: Nft Scam. Resumo das evidências: VirusTotal 16/93 (ADMINUSLabs, ChainPatrol, Criminal IP, alphaMountain.ai, BitDefender); URLQuery 7 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 95/100. Registrador: Tucows.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain nft-giftbox4-roan.vercel.app indicates a confirmed NFT crypto drainer scam, currently offline as of July 23, 2026. The domain, registered on February 21, 2026, through Tucows Domains Inc., was hosted on Amazon Web Services (AS16509) at IP 216.198.79.67, located in the United States. Infrastructure analysis reveals the use of Vercel for deployment, a common platform for rapid scam site hosting, alongside HTTP Strict Transport Security (HSTS) enforcement, which may have been employed to lend an appearance of legitimacy. The domain's SSL certificate is issued by Google Trust Services (WR1), a standard provider, offering no immediate red flags beyond its use in this context. Google Safe Browsing classified this domain under social engineering, a designation consistent with crypto drainer schemes that manipulate victims into connecting wallets or authorizing transactions.
The domain appears on one security blocklist, specifically PhishDestroy, and was flagged by 16 of 93 security vendors on VirusTotal, though the absence of additional context limits the granularity of these detections. The HTTP status code 451 (Unavailable For Legal Reasons) suggests the site was taken down following enforcement action or abuse reporting, though the exact timeline and responsible party remain unclear. The page title 'Deployment Unavailable' further corroborates the site's offline status, though it provides no insight into the prior content or functionality. The scam type is explicitly categorized as an NFT scam, aligning with the domain name's suggestive phrasing ('giftbox4'), which often implies false incentives such as free NFTs or airdrops.
While the exact mechanics of the drainer are not documented in available intelligence, the combination of hosting on Vercel, social engineering flags, and crypto-focused nomenclature strongly supports this classification.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenPhish | nft-giftbox4-roan.vercel.app/ |
phishing | Phishing - Crypto/Wallet |
| OpenDNS | nft-giftbox4-roan.vercel.app |
phishing | Phishing Block |
| Quad9 DNS | nft-giftbox4-roan.vercel.app |
malicious | Sinkholed |
| Cloudflare DNS | nft-giftbox4-roan.vercel.app |
malicious | Sinkholed |
| DNS4EU | nft-giftbox4-roan.vercel.app |
malicious | Sinkholed |
| DNS0 Zero | nft-giftbox4-roan.vercel.app |
malicious | Sinkholed |
| OpenPhish | nft-giftbox4-roan.vercel.app |
phishing | Phishing - Crypto/Wallet |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 2 identified
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of nft-giftbox4-roan.vercel.app · checked Mar 2, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo