Is nft-aridrop-demo.vercel.app a scam?

Our automated security review flags nft-aridrop-demo.vercel.app as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is nft-aridrop-demo.vercel.app safe to use?

No — nft-aridrop-demo.vercel.app scored 18/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does nft-aridrop-demo.vercel.app have a valid SSL certificate?

Yes. nft-aridrop-demo.vercel.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WR1, expiring in 81 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the nft-aridrop-demo.vercel.app domain?

nft-aridrop-demo.vercel.app is 0 days old. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has nft-aridrop-demo.vercel.app been flagged by antivirus engines?

1 out of 92 antivirus engines in our malware network flagged nft-aridrop-demo.vercel.app as malicious or suspicious. Even one detection is a meaningful signal.

Is nft-aridrop-demo.vercel.app on any phishing or malware blacklists?

No. nft-aridrop-demo.vercel.app is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is nft-aridrop-demo.vercel.app hosted?

nft-aridrop-demo.vercel.app resolves to an IP operated by Vercel, Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the nft-aridrop-demo.vercel.app report updated?

This is a permanent record of the scan run on July 7, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around nft-aridrop-demo.vercel.app have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

DANGEROUS

Crypto scam / wallet-drainer

Domain was registered only 0 days ago — brand-new sites are higher-risk by default. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Security Review

Is nft-aridrop-demo.vercel.app legit or a scam?

Our verdict:Dangerous· 18/100

SafeSuspiciousDangerous

A malicious NFT airdrop scam hosted on Vercel that uses fake giveaway lures to drain cryptocurrency wallets.

Top reasons

Domain age is 0 days, indicating a brand-new and likely ephemeral setup.Hosted on a free Vercel subdomain, a high-risk platform for phishing abuse.Flagged as suspicious by Gridinsoft antivirus engine.

nft-aridrop-demo.vercel.appScanned 1d ago

Post Facebook

Trust score

DANGEROUS

Score breakdown

Heuristics 47·MT 5

Category tags

crypto fraud#airdrop drainer#crypto drainer#phishing95% MT confidence

Technical red flags (1)

Domain is 0 days old

Warning signals (1)

1 of 92 engines flagged

Positive signals (3)

Not on major blacklistsEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

1/92

Engines flagged this URL

Domain Age

0 days old

Registration date unknown

Intelligence

Dangerous

Critical likelihood · 95% confidence

Website Preview

Live view unavailable

The site returned a server error when we tried to load it in our sandbox, so there was no page to capture. A working business almost always renders — treat this site as unverified.

nft-aridrop-demo.vercel.app

We attempt a live render of every scanned site in a safe sandbox. This one couldn’t be reached — the failure itself is a signal, noted in the analysis below.

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

We could not load a live view of this site; the capture returned a server error.

Visual risk50/100

What our vision model saw

1 signal

Live capture returned a server/proxy error — the page could not be rendered

Intelligence

Advanced threat intelligence

Analysis

Critical scam likelihoodengineMT · Guardiantrust5/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The domain was registered today and shows zero history of legitimate operation. It is hosted on a free Vercel subdomain, a common tactic for ephemeral phishing attacks designed to bypass traditional hosting filters. Gridinsoft has already flagged the site as suspicious. Our research identified social media reports linking this specific URL to automated 'task' scripts and suspicious IP addresses. The 'airdrop demo' naming convention is a classic hallmark of wallet-draining kits that target NFT collectors. Given the lack of business registration and the immediate association with malicious social media activity, this site is a high-risk threat.

Full dossier

Analysis complete

Page Content

The site presents itself as an NFT airdrop demonstration, a common lure used to entice users into connecting their cryptocurrency wallets. Our page analyzer was unable to render a stable view due to server-side errors, which often occurs when malicious scripts are being updated or when the site is configured to only serve content to specific referral headers. The naming convention 'nft-aridrop-demo' (including the misspelling of 'airdrop') is highly characteristic of rapidly deployed scam templates.

Infrastructure

The site is hosted on Vercel's infrastructure using a free-tier subdomain. While Vercel is a legitimate platform, its subdomains are frequently abused by attackers to host short-lived phishing pages because they inherit the reputation of the parent domain. The hosting IP 64.29.17.67 has already accumulated 11 abuse reports. The presence of a valid SSL certificate from Google Trust Services is a standard feature of modern phishing sites and does not indicate safety.

Domain History

This domain has an age of 0 days, meaning it was created within the last 24 hours. Legitimate cryptocurrency platforms and NFT projects typically have established domain histories, registered business entities, and verifiable social media presences. The immediate deployment of a 'demo' site on a free hosting provider without any prior registration history is a definitive red flag for a 'burnable' scam domain.

Web Reputation

Our research uncovered specific reports on X (formerly Twitter) linking this URL to suspicious automated tasks and redirect chains. Similar subdomains on other free hosting platforms like Netlify have been flagged by independent review aggregators as potential scams. There are no positive reviews, business registrations, or legitimate community discussions associated with this host, which is expected for a newly launched malicious asset.

What this means for you

Interacting with this site poses a critical risk to your digital assets. The page likely contains a 'drainer' script that, once a wallet is connected, will request permissions to transfer your tokens or NFTs to an attacker-controlled address. You should close the tab immediately and avoid clicking any links shared via social media that lead to this subdomain.

Risk Factors

Domain age is 0 days, indicating a brand-new and likely ephemeral setup.
Hosted on a free Vercel subdomain, a high-risk platform for phishing abuse.
Flagged as suspicious by Gridinsoft antivirus engine.
Linked to suspicious automated 'task' scripts in social media reports.
Uses a known scam naming pattern (NFT airdrop lure).
Hosting IP has multiple existing abuse reports.
No verifiable business registration or physical presence found.

Positive Signals

Uses a valid SSL certificate for encrypted communication.

AI Recommendation

Do not connect your cryptocurrency wallet or sign any transactions on this site. This is a high-risk domain used for wallet draining.

Scam network detected

2 linked domains correlated

This site appears to be part of a wider campaign using 'demo' subdomains across multiple free hosting providers to distribute wallet-draining scripts.

nft-aridrop-demo.netlify.appshort.gy

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for nft-aridrop-demo.vercel.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

1 scam report

Key findings

7 headline facts from open-web research

Domain nft-aridrop-demo.vercel.app is a Vercel-hosted subdomain (free tier).
Domain age listed as 0 days; extremely new deployment.
Referenced in an X post linking it with a short.gy redirect and IP 165.140.86.190:3000/task/mac?token=...
Similar subdomain nft-aridrop-demo.netlify.app flagged by ScamAdviser as potentially a scam.
Vercel.app subdomains frequently abused for phishing and fake airdrop pages (multiple reports of credential-harvesting campaigns).
No Trustpilot, ScamAdviser, or ScamDoc entries found specifically for this exact domain.
No business registration, reviews, or complaints located in searches.

Scam reports (1)

Direct quotes from public scam databases, forums, and news.

X (Twitter)open
"@banthisguy9349 PEsnCV.short[.]gy/rkCiMn9m nft-aridrop-demo.vercel[.]app 165.140.86[.]190:3000/task/mac?token=bc7302f71ff3"

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We identified a specific report on X (Twitter) where this domain was used in a suspicious redirect chain involving short-link services and direct IP connections. Further investigation shows that similar subdomains on other free hosting providers have been flagged by independent review aggregators as fraudulent. No business registration or legitimate project documentation was found for nft-aridrop-demo.vercel.app.

Threat Detection

Antivirus Engines

Detection matrix · live

1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious1Suspicious59Harmless92Engines

of 92

Gridinsoft

Suspicious· suspicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

45/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst tagged this as an airdrop / drainer.

Scam-Type Likelihood

1 of 13 categories showed signals

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

45/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst tagged this as an airdrop / drainer.

Technical Details

domain · encryption · redirects · server reputation · referenced

Domain & Encryption

Domain History

Age0 days old

RegistrarHidden

RegisteredUnknown

ExpiresUnknown

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WR1

ExpiresSep 26, 2026 (81d)

Self-signedNo

Hosting & Technology

HostingVercel, Inc

Server locationUS

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1308http://nft-aridrop-demo.vercel.app/
2451https://nft-aridrop-demo.vercel.app/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file11

ISPVercel, Inc

Usage typeContent Delivery Network

What to do

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

Do not interact with nft-aridrop-demo.vercel.app
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Never paste your seed phrase anywhere
Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.
If you already connected a wallet
Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.
Report the wallet and URL
File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.
Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

Coinbase

Publicly-listed, regulated US exchange.

Kraken

Long-established, regulated exchange.

Gemini

Regulated US exchange & custodian.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

Trust / 100

Final Verdict·nft-aridrop-demo.vercel.app

DANGEROUS

This is a malicious crypto-draining site hosted on a free Vercel subdomain. It uses a fake NFT airdrop lure to trick users into connecting their wallets. Do not interact with this page or sign any transactions.

Do not connect your cryptocurrency wallet or sign any transactions on this site. This is a high-risk domain used for wallet draining.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags nft-aridrop-demo.vercel.app as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — nft-aridrop-demo.vercel.app scored 18/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. nft-aridrop-demo.vercel.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WR1, expiring in 81 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
nft-aridrop-demo.vercel.app is 0 days old. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
1 out of 92 antivirus engines in our malware network flagged nft-aridrop-demo.vercel.app as malicious or suspicious. Even one detection is a meaningful signal.
No. nft-aridrop-demo.vercel.app is not currently listed on the major browser blocklist feeds that modern browsers use.
nft-aridrop-demo.vercel.app resolves to an IP operated by Vercel, Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 7, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around nft-aridrop-demo.vercel.app have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Recently scanned

Other Dangerous reports

tryslimtide.systeme.io

1h ago

Read the review

Dangeroustrust1

www--santander--es.insuit.net

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.