mysterybxs93[.]vercel[.]app

This domain, mysterybxs93.vercel.app, is identified as a high-risk crypto drainer phishing site designed to compromise digital wallet credentials. Analysis indicates the absence of overt brand impersonation, suggesting a generic credential-harvesting or token-draining operation. The infrastructure does not match known drainer kits like Angel Drainer or Inferno, but the deployment pattern aligns with opportunistic phishing campaigns targeting decentralized finance users. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 64.29.17.67, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain was registered on February 21, 2026, through Tucows Domains Inc., an atypical registrar for malicious deployments. Detection metrics show 17 out of 95 security vendors on VirusTotal flagging the domain, while it appears on five independent security blocklists. The SSL certificate is issued by Google Trust Services (WR1), a common but not exclusive indicator of legitimate domains. Google Safe Browsing status is not explicitly confirmed, but the domain’s presence on multiple blocklists suggests active malicious classification. The domain is currently offline, displaying a 'Deployment Unavailable' page title, likely due to takedown or infrastructure suspension. Despite its inactive status, residual risk remains for users who may have interacted with the domain during its operational window. Historical DNS records and cached content could still pose threats if accessed via local resolvers or archival services. Users are advised to verify wallet integrity, revoke suspicious smart contract approvals, and monitor transaction histories for unauthorized activity. Continuous vigilance is recommended, as phishing infrastructure often resurfaces under altered domains or IPs.