mintingnow-opnsea27[.]vercel[.]app

The domain mintingnow-opnsea27.vercel.app was registered through Tucows Domains Inc. on 21 February 2026. Hosting resolves to IP 216.198.79.67, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site presents a TLS certificate issued by Google Trust Services under the WR1 label, confirming that HTTPS is correctly provisioned. An HTTP request to the root URL returns status code 451, and the page title reported by passive monitoring reads “Deployment Unavailable”, indicating that the application has been taken offline.

Technical fingerprints reveal the use of Vercel as the underlying platform and the presence of HTTP Strict Transport Security (HSTS) headers. VirusTotal analysis shows that 12 of 93 scanned security vendors flagged the domain as malicious, providing independent corroboration of suspicious activity. The domain appears on four external blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—each of which classifies it as a crypto‑related scam. The threat taxonomy supplied in the intelligence marks the site as a “Crypto Scam” and more specifically as a “crypto drainer”, a pattern commonly used to lure victims into transferring cryptocurrency assets to attacker‑controlled wallets.

Because the site is currently offline, active payload collection is not possible, and the exact lures or wallet addresses employed remain unknown. Nonetheless, the combination of a recent registration, Vercel hosting, a valid Google‑issued TLS certificate, multiple vendor detections, and inclusion on reputable blocklists provides a high‑confidence indication that the domain was purpose‑built for cryptocurrency theft. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same IP or Vercel project identifiers, and update threat‑intel feeds with the associated indicators of compromise (IOC) – domain name, IP address 216.198.79.