live-mints10[.]vercel[.]app

This domain, live-mints10.vercel.app, is an active phishing site designed to impersonate OpenSea, a leading non-fungible token (NFT) marketplace. The site presents a fraudulent interface mimicking the legitimate OpenSea.io platform, with the explicit goal of deceiving users into entering sensitive credentials, such as wallet private keys or recovery phrases. Such credentials, once compromised, enable attackers to gain unauthorized access to digital assets, leading to financial theft and irreversible loss of NFT holdings. The page title explicitly displays 'OpenSea.io,' reinforcing the illusion of authenticity and increasing the likelihood of successful deception among unsuspecting users. Analysis indicates that live-mints10.vercel.app is registered through Vercel Inc., a legitimate hosting provider often exploited for phishing due to its ease of deployment and free tier availability. The domain resolves to the IP address 216.198.79.131, geolocated within the United States under Vercel, Inc.'s infrastructure. As of the latest assessment, the domain remains active and has been flagged by 1 out of 95 security vendors on VirusTotal, a notably low detection rate that suggests evasion techniques may be in use. Additionally, the domain appears on four security blocklists, including those maintained by anti-phishing and blockchain security entities. The SSL certificate, issued by Google Trust Services (WR1), provides a false sense of security, as phishing sites commonly use valid certificates to appear legitimate. Users who have visited live-mints10.vercel.app or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any wallets or accounts that may have been linked to the site and revoke any suspicious permissions granted to third-party applications. Monitor connected wallets and accounts for unauthorized transactions, and consider transferring assets to a new, secure wallet if compromise is suspected. Report the domain to relevant security platforms to aid in broader threat mitigation. Given the high-risk nature of this campaign, vigilance and proactive security measures are critical to preventing further exploitation.