nftlucky-box05[.]vercel[.]app

This domain, nftlucky-box05.vercel.app, is confirmed to be a crypto drainer, a type of malicious site designed to steal cryptocurrency from users by tricking them into revealing their private keys or other sensitive information. The domain poses a high risk to individuals and organizations that engage with it, as it can lead to significant financial losses and compromised security.

Analysis indicates that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a moderate to high level of consensus among security experts regarding its malicious nature. The domain was registered through Tucows Domains Inc. on February 21, 2026, and currently resolves to the IP address 216.198.79.67, which is located in the United States under the Autonomous System Number AS16509, operated by Amazon.com, Inc. The site appears on five security blocklists, including PhishDestroy, Polkadot, Enkrypt, Codeesura, and PhishingDB, further corroborating its threat status. Additionally, the domain's SSL certificate is issued by Google Trust Services, which may have been used to gain user trust.

If users have visited this domain, they should immediately check their cryptocurrency wallets for any unauthorized transactions and consider changing their private keys and passwords. It is also recommended to run a full system scan using an up-to-date antivirus solution and to monitor their accounts for any unusual activity. Users should report any suspicious transactions to their wallet providers and consider enabling multi-factor authentication for all relevant accounts to enhance security.