mintlink43[.]vercel[.]app

This domain, mintlink43.vercel.app, is identified as part of a crypto drainer operation targeting cryptocurrency wallet credentials and automated transaction redirection. Analysis indicates no direct brand impersonation, suggesting a generic or kit-based deployment likely leveraging open-source drainer frameworks. The infrastructure appears designed for rapid deployment and takedown cycles, common in automated cryptocurrency theft campaigns. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 9 out of 95 security vendors on VirusTotal, with detection labels including malicious, phishing, and crypto-related threats. It was registered through Tucows Domains Inc. on February 21, 2026, an anomalous creation date likely resulting from registrar data misconfiguration or intentional obfuscation. The domain resolves to IP address 64.29.17.195, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common certificate authority for both legitimate and malicious deployments. The domain appears on one security blocklist, specifically PhishDestroy, and currently returns a 'Deployment Unavailable' page title, indicating either a temporary suspension or deliberate takedown. Current status shows the domain has been taken offline, though residual risk remains due to the persistent nature of crypto drainer infrastructure. The anomalous registration date and rapid takedown suggest this may be part of a larger, automated campaign with multiple rotating domains. Users who interacted with this domain prior to takedown should immediately revoke wallet permissions, check for unauthorized transactions, and monitor connected accounts for suspicious activity. Security teams are advised to block the domain, IP, and associated SSL certificate fingerprints in network defenses, while maintaining vigilance for similar patterns in future deployments.