mintcampaign12[.]vercel[.]app

The domain mintcampaign12.vercel.app is currently classified as an active crypto‑drainer infrastructure with an elevated risk rating. The domain resolves to the IPv4 address 64.29.17.131 and is hosted on Vercel Inc., as indicated by the registrar information. No authoritative nameserver records were returned during lookup, which is consistent with Vercel’s dynamic DNS model and can hinder traditional zone‑transfer based detection. The domain appears on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, suggesting that multiple anti‑phishing feeds have observed malicious activity originating from this host.

VirusTotal analysis shows that two out of ninety‑one scanned engines have raised detections, reinforcing the suspicion of malicious behavior while also indicating that many scanners have not yet flagged the site. Publicly available intelligence does not include a page title, SSL certificate details, or HTTP response codes, so the exact content served by the site remains unverified. The lack of a visible page title and the absence of SSL metadata limit the ability to confirm whether the site is currently serving a phishing landing page or a crypto‑draining payload. Nevertheless, the association with known crypto‑drainer blocklists and the presence on MetaMask’s denylist strongly imply that the domain is being used to solicit cryptocurrency transactions from unsuspecting users, possibly by presenting fraudulent wallet addresses or transaction requests.

Defenders should prioritize immediate network‑level blocking of the IP address 64.29.17.131 and add mintcampaign12.vercel.app to URL filtering policies. Continuous monitoring of DNS queries for this domain is advised, as the underlying IP may change under Vercel’s elastic infrastructure. Security operations should also enrich alerts with the blocklist identifiers (PhishDestroy, SEAL) and correlate any wallet‑address exposure events with this indicator.