minting-box14[.]vercel[.]app

Analysis as of July 23 2026 indicates that the domain minting-box14.vercel.app is currently offline, returning HTTP status 451 and a page title of “Deployment Unavailable”. The site was originally registered on 28 January 2020 through Tucows Domains Inc. and is hosted on Vercel infrastructure, as evidenced by the presence of Vercel‑specific DNS records (ns1‑ns4.vercel‑dns-3.com) and the HTTP header indicating HSTS enforcement. The domain resolves to IP 64.29.17.3, which belongs to Amazon.com, Inc. (AS16509) and is geolocated to the United States. TLS negotiation presents a certificate issued by Google Trust Services under the WR1 intermediate, confirming the use of a valid, publicly trusted certificate chain.

Reputation data shows the domain appears on four security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—each flagging it as a crypto‑drainer operation. VirusTotal scans have identified the domain as malicious in 15 of 93 security vendors, reinforcing the blocklist findings. No additional public intelligence such as Safe Browsing or OTX entries was observed beyond the supplied data. The combination of a recent blocklist presence, a valid SSL certificate, and hosting on a reputable cloud provider suggests a deliberate attempt to lend credibility to a crypto‑drainer campaign while leveraging legitimate infrastructure.

Because the site is offline, active exploitation cannot be confirmed at this time, but the historical evidence points to prior malicious use. Defenders should continue to block the domain and associated IP address at perimeter defenses, monitor for any resurrection of the site, and update internal threat intelligence feeds with the observed indicators. Ongoing observation of the Vercel DNS zones for re‑registration of the domain, as well as correlation of any new traffic to 64.29.17.3, is recommended to detect potential re‑activation.