open-sea-xi[.]vercel[.]app

The domain open-sea-xi.vercel.app is actively engaged in brand impersonation, specifically targeting OpenSea, the largest NFT marketplace. The threat level is assessed as high, with the domain designed to deceive users into believing it is an official OpenSea site. This impersonation can lead to unauthorized data collection, financial loss, and other malicious activities.

Infrastructure analysis reveals that the domain is registered through Tucows Domains Inc. and is currently hosted on an IP address located in the United States (AS16509 Amazon.com, Inc.). The domain was created on February 21, 2026, and is currently flagged by Google Safe Browsing for phishing. Additionally, it has been detected by 9 out of 95 security vendors on VirusTotal and appears on 1 security blocklist, indicating a moderate level of recognition among security communities.

As of the latest assessment, the domain remains active and continues to pose a significant risk to unsuspecting users. Security researchers recommend that individuals avoid interacting with this site and verify the URL before logging in or sharing any sensitive information. Organizations should consider implementing additional security measures, such as DNS filtering and user education, to mitigate the risk of exposure to this and similar threats.