live-openseamints37[.]vercel[.]app

Analysis of live-openseamints37.vercel.app shows a high‑risk brand‑impersonation campaign targeting OpenSea. The domain was registered on February 21, 2026 through Tucows Domains Inc. and resolves to IP address 216.198.79.67, which belongs to Amazon.com, Inc. (AS16509) in the United States. The site is hosted on Vercel infrastructure and enforces HSTS, indicating a modern deployment stack. The TLS certificate is issued by Google Trust Services under the WR1 trust profile, confirming a legitimate certificate chain, but the certificate does not mitigate the malicious intent.

An HTTP request returns status code 451 with the page title "Deployment Unavailable," suggesting the site has been taken offline, consistent with the current offline status reported. Multiple defensive services have identified the domain: PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura have blocked it, and it appears on five external blocklists. VirusTotal scans report 15 detections out of 93 vendors, reinforcing the malicious classification. The campaign is tagged as a crypto scam, aligning with the brand‑impersonation of OpenSea, a leading NFT marketplace.

Uncertainties remain around the exact payload or user‑interaction flow because the site is no longer serving content. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor traffic to the associated IP range for any resurgence, and update threat intelligence feeds with the domain, its registrar, and hosting details. Given the confirmed detections and brand targeting, any attempted connections should be treated as hostile and logged for forensic analysis.