newmints937[.]vercel[.]app

The domain newmints937.vercel.app is currently flagged as a crypto drainer and is listed as offline. Infrastructure analysis shows the site is hosted on Vercel and serves an HTTP 451 response with the page title “Deployment Unavailable”. The presence of HTTP Strict Transport Security (HSTS) indicates the site forces HTTPS, and the TLS certificate is issued by Google Trust Services under the WR1 profile, confirming a valid certificate chain. DNS resolution points to IP 216.198.79.67, which belongs to Amazon.com, Inc. (AS16509) and is geolocated to the United States. Registration data reveals the domain was created on 21 February 2026 through Tucows Domains Inc., a registrar commonly associated with legitimate registrations but also used by malicious actors.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal scans have returned 16 positive detections out of 93 vendors, indicating a moderate level of consensus among security tools that the domain is malicious. The listed scam type is “Crypto Scam”, aligning with the broader classification of a crypto drainer. The combination of a recent creation date, hosting on a shared cloud platform, a valid SSL certificate, and multiple vendor detections suggests the site was likely deployed to harvest cryptocurrency credentials or redirect victims to malicious wallets before being taken offline.

Uncertainties remain regarding the exact payload or phishing pages that were served before the deployment was removed, as no content analysis is available. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP address, and consider adding the IP to threat intelligence feeds. Because the SSL certificate is valid, certificate pinning is not a reliable mitigation. Ongoing vigilance is recommended to detect any re‑registration attempts or similar subdomains that reuse the same infrastructure.