mintingnow-opnsea51[.]vercel[.]app

The domain mintingnow-opnsea51.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and resolves to IP address 64.29.17.131, which is associated with ASN AS16509 owned by Amazon.com, Inc., located in the United States. The site presents an HTTP 451 status code and a page title of "Deployment Unavailable," indicating that the hosting service has been taken offline. Technical fingerprinting shows the use of Vercel as the hosting platform and the presence of HTTP Strict Transport Security (HSTS).

TLS termination is provided by a Google Trust Services certificate issued under the WR1 identifier. The domain appears on four security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura, and VirusTotal reports that 14 of 93 security vendors have flagged the domain as malicious. The threat classification is a crypto drainer, consistent with the "Crypto Scam" label in the intelligence.

While the current online status is offline, the infrastructure components—including the Amazon‑owned IP range and Vercel deployment—suggest that the operators could reactivate the domain or clone the setup for future campaigns. Defenders should proactively block the domain and its associated IP address at perimeter defenses, update internal threat intel feeds with the blocklist identifiers, and monitor for any re‑registration attempts or similar Vercel‑based deployments originating from the same ASN. Continuous correlation with security vendor alerts is advised to detect potential resurgence of the crypto drainer activity.