luckiestmint6[.]vercel[.]app

The domain luckiestmint6.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is hosted on a Vercel infrastructure that presents a valid SSL certificate issued by Google Trust Services under the WR1 profile. An HTTP 451 response code is returned, and the page title displayed is "Deployment Unavailable," indicating that the site is currently offline. Despite the offline status, threat intelligence shows the domain is actively classified as a crypto scam and appears on two security blocklists. It has been flagged by PhishDestroy and ScamSniffer, and Google Safe Browsing marks it for social engineering.

The IP address 64.29.17.131 resolves to a United States location within Amazon.com, Inc. (AS16509). VirusTotal analysis shows that 16 of 93 security vendors have flagged the domain, reinforcing the high‑risk assessment. The presence of HSTS in the detected technologies suggests the site enforced strict transport security when it was operational.

Collectively, the registration timeline, hosting details, SSL provenance, blocklist listings, safe‑browsing classification, and multi‑vendor detections constitute concrete evidence that the domain was used for malicious cryptocurrency draining activity. Defenders should continue to block the domain at perimeter controls, monitor the associated IP range for any reactivation, and include the domain hash in threat‑intel feeds. Given the current offline state, any future resurrection of the site should be treated as high‑risk until a thorough content inspection can confirm the absence of malicious payloads.