limited-tknmint92[.]vercel[.]app

The domain limited-tknmint92.vercel.app was registered through Tucows Domains Inc. on 21 February 2026 and resolves to the Amazon‑owned address 64.29.17.3 (AS16509, United States). Vercel hosting is indicated by the presence of Vercel technology and an active HSTS header, while the TLS certificate is issued by Google Trust Services under the WR1 label. An HTTP 451 response and the page title “Deployment Unavailable” confirm that the site is currently taken offline, a status corroborated by blocklist entries on PhishDestroy and ScamSniffer.

Google Safe Browsing has flagged the domain for social engineering, and VirusTotal reports that 14 of 93 scanning engines classify the domain as malicious, consistent with its categorisation as a crypto‑drainer scam. The observable indicators collectively suggest that the domain was used to lure victims into a cryptocurrency‑draining operation before being shut down. At present, the exact payload, phishing pages, or wallet addresses associated with the campaign have not been disclosed in public sources, leaving the full scope of the compromise uncertain.

Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the IP address or Vercel sub‑domains, and consider sharing the indicator set with threat‑intel communities to aid detection of related infrastructure. Ongoing vigilance is advised, particularly for users who may have previously interacted with the site before its takedown.