p2p-sand-five[.]vercel[.]app

This domain is flagged as a high-risk crypto wallet drainer targeting peer-to-peer (P2P) cryptocurrency users. Analysis indicates the infrastructure is designed to execute unauthorized transactions by tricking victims into connecting their wallets to malicious smart contracts, resulting in immediate fund exfiltration. The specific threat type—crypto wallet draining—poses severe financial risk, as compromised wallets often experience total asset depletion within minutes of interaction. Infrastructure analysis reveals the domain p2p-sand-five.vercel.app was registered through Vercel on May 27, 2026, with an anomalous future creation date suggesting potential domain spoofing or registry manipulation. As of the latest assessment, the domain remains active and is detected by 1 of 95 security vendors on VirusTotal. It appears on two independent security blocklists, including PhishDestroy and ScamSniffer, which classify it as malicious. No legitimate association with P2P platforms or cryptocurrency services has been identified, and the domain exhibits no historical trust scores or benign usage patterns. Mitigation requires immediate action from both users and network defenders. End users must avoid interacting with p2p-sand-five.vercel.app and refrain from connecting wallets to any unverified P2P interfaces. Browser-based security extensions should be configured to block known crypto drainer signatures, and wallet software should be updated to enforce strict transaction confirmation prompts. Network administrators are advised to implement DNS-level blocking for the domain and monitor outbound connections to Vercel-hosted endpoints exhibiting similar naming conventions (e.g., p2p-[random]-five). Incident responders should treat wallet connections to this domain as compromised and initiate asset migration to new, secure wallets immediately.