minting-box9[.]vercel[.]app

The domain minting-box9.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. and resolves to the IP address 64.29.17.67, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site presents the HTTP status code 451 and the page title “Deployment Unavailable”, indicating that the Vercel‑hosted application is no longer serving content. The TLS certificate is issued by Google Trust Services under the WR1 intermediate, confirming a valid HTTPS configuration despite the site being offline. Security telemetry shows that 13 of 93 VirusTotal scanners flagged the domain as malicious, and the domain appears on four external blocklists.

It has been actively blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura protection services. Automated fingerprinting identified the use of Vercel as the hosting platform and the presence of HTTP Strict Transport Security (HSTS). The threat‑type classification is a “Crypto Scam” specifically identified as a crypto drainer, consistent with the high‑risk rating assigned to the infrastructure. Evidence suggests the infrastructure was deliberately taken offline, as indicated by the “taken offline” status and the 451 response.

However, the underlying intent of the domain remains uncertain because the content is no longer reachable for direct analysis, and no additional artifacts such as phishing pages or wallet addresses have been disclosed. Defenders should continue to monitor the associated IP address 64.29.17.67 for any re‑use, enforce blocklist rules that already include this domain, and update internal threat‑intel feeds with the registration and hosting details. Organizations that have previously observed crypto‑drainer campaigns should treat any traffic to this host as malicious and isolate or drop it, while also reviewing any credential or wallet compromise reports that reference the domain.