nft-funnywords[.]vercel[.]app

Analysis of nft-funnywords.vercel.app, observed on July 22 2026, indicates an active cryptocurrency draining operation masquerading as an NFT minting service. The site returns HTTP 200 and presents the page title “Mint Your NFT”, confirming the advertised intent. Registration data shows the domain was created on 27 April 2026 and is registered via Vercel Inc., a cloud platform that also hosts the infrastructure. DNS resolution points to IP 64.29.17.67, which is listed as belonging to Vercel, Inc. in the United States. The TLS certificate is issued by Google Trust Services under the WR1 root, providing a valid HTTPS connection but offering no protective assurance.

Security assessments reveal a Gridinsoft trust score of 0 / 100 and a classification as an “NFT Scam” with a crypto‑drainer profile. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows a single detection out of 91 scanning engines, indicating at least one vendor has flagged the site as malicious. Detected technologies include Vercel and HTTP Strict Transport Security (HSTS).

The nameserver query returned “NS_NOT_FOUND”, limiting visibility into DNS delegation. No further artefacts such as malicious payloads or credential‑harvesting forms have been disclosed. Defenders should add the domain and its hosting IP to network‑level blocklists, monitor for similar Vercel‑hosted subdomains, and enforce strict validation of TLS certificates. Continuous re‑evaluation is recommended given the low trust score and emerging detection activity.