mintingnow-opnsea37[.]vercel[.]app

Analysis indicates that mintingnow-opnsea37.vercel.app is a newly registered domain, created on February 21, 2026, and associated with a crypto‑drainer scam. The domain resolves to IP address 216.198.79.3, which is allocated to Amazon.com, Inc. (AS16509) and geolocated in the United States. TLS is provided by Google Trust Services under the WR1 certificate, and the site presents HSTS headers, reflecting a typical Vercel deployment configuration. The HTTP response code returned is 451, and the page title displayed is "Deployment Unavailable," confirming that the service is currently offline.

The domain has been listed on four security blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura, reinforcing its classification as malicious. VirusTotal scans have recorded 12 detections out of 93 security vendors, providing additional corroboration of its harmful nature. Registrar information shows the domain was registered through Tucows Domains Inc., a common registrar for disposable or short‑lived malicious sites.

While the offline status limits direct observation of phishing or credential‑harvesting pages, the combination of a recent registration date, association with a known crypto‑drainer campaign, and multiple independent blocklist entries constitutes strong evidence of malicious intent. Defenders should ensure that this domain is added to network and endpoint blocklists, monitor DNS queries for repeated resolution attempts, and watch for re‑registration attempts or similar naming patterns that could be used to resurrect the campaign. Continuous threat‑intel feeds should be consulted for any resurgence, and any outbound connections to the identified IP address should be logged and investigated as potential exfiltration attempts.