luckiestmint11[.]vercel[.]app

The domain luckiestmint11.vercel.app is assessed as HIGH risk due to its classification as a crypto_drainer infrastructure targeting cryptocurrency wallet extraction and unauthorized fund transfer operations. Analysis indicates an active deployment stage with phishing intent confirmed by multiple independent security signals. The page title "Deployment Unavailable" suggests dynamic or suspended content delivery often used in evasive malicious hosting setups.

Infrastructure analysis reveals multiple corroborating technical indicators: VirusTotal detection rate is 17/95 security vendors, confirming cross-platform threat recognition. The domain was registered through Tucows Domains Inc. and was created on February 21, 2026, indicating a recently established asset within a short operational window. It resolves to IP 216.198.79.131 hosted under Vercel, Inc infrastructure in the United States, and is protected by SSL issued via Google Trust Services (WR1). The domain is flagged by Google Safe Browsing as phishing and appears on 3 independent security blocklists including PhishDestroy, ScamSniffer, and PhishingDB, reinforcing its malicious classification. The asset is currently marked active and continues to resolve publicly despite partial service instability.

Risk mitigation should prioritize immediate blocking at DNS, browser, and network gateway levels. Users should be prevented from interacting with any wallet connection prompts or transaction signing requests originating from this domain. Security teams should deploy IOC-based filtering using the IP 216.198.79.131 and domain pattern detection for *.vercel.app subdomains associated with crypto_drainer activity. Continuous monitoring is recommended due to potential rapid redeployment under new subdomains. Endpoint protection systems should flag any browser attempts to access the domain and enforce user warnings for phishing wallet interaction attempts. Incident response teams should treat any exposure as potential credential compromise and verify blockchain transaction logs for unauthorized activity.