luckymint9268[.]vercel[.]app

The domain luckymint9268.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is currently reported as offline. HTTP probing returns a 451 status code and the page title reported by scanners is "Deployment Unavailable," indicating that the Vercel‑hosted deployment has been removed or disabled. The site employed Vercel infrastructure and HSTS, and its TLS certificate was issued by Google Trust Services under the WR1 label, confirming a legitimate certificate chain despite the malicious purpose. Network resolution points to IP address 64.29.17.67, an Amazon.com, Inc. host within AS16509 located in the United States.

Multiple threat‑intelligence feeds have flagged the domain as a crypto‑drainer scam: sixteen of ninety‑three VirusTotal scanners flagged it, and it appears on four external blocklists. Defensive services including PhishDestroy, Polkadot, Enkrypt, and Codeesura have already blocked the host. Evidence suggests the domain was used to lure victims into transferring cryptocurrency, although the exact phishing kit or lure content has not been recovered.

Uncertainty remains around any residual infrastructure that may be repurposed, as the site is presently offline and no active payloads have been observed. Security teams should continue to monitor the IP address for re‑use, enforce blocklist entries, and incorporate the domain’s hash and URL patterns into URL filtering and endpoint detection rules. Additional investigation of related Vercel deployments and any associated subdomains is recommended to ensure complete remediation of the crypto‑drainer campaign.