live-openseamints45[.]vercel[.]app

This domain, live-openseamints45.vercel.app, poses a high-risk brand impersonation threat targeting users of the OpenSea NFT marketplace. Analysis indicates the site was designed to mimic OpenSea’s login or transaction pages, tricking visitors into entering sensitive credentials, wallet recovery phrases, or payment details. The domain’s infrastructure and page content were structured to deceive users into believing they were interacting with the legitimate OpenSea platform, potentially leading to unauthorized access to digital wallets or financial accounts. Evidence confirming the malicious nature of this domain includes detection by 17 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly flagging it as phishing. The domain was registered on February 21, 2026, through Tucows Domains Inc., and resolved to the IP address 64.29.17.131, hosted on Amazon’s AS16509 network. Additionally, the domain appears on five security blocklists, including PhishDestroy and PhishingDB, and its SSL certificate was issued by Google Trust Services under the WR1 intermediate. The page title, 'Deployment Unavailable,' suggests the site may have been taken offline or was temporarily disabled during its operational phase. Users who visited live-openseamints45.vercel.app should assume their credentials or wallet details may have been compromised. Immediate steps include revoking access to any connected wallets or accounts, changing passwords for associated services, and enabling multi-factor authentication where available. Monitor financial and transactional accounts for unauthorized activity, and consider reporting the incident to relevant cybersecurity response teams. If cryptocurrency wallets were accessed, transfer assets to a new wallet with a fresh recovery phrase. Avoid reusing passwords or recovery phrases across platforms to mitigate further risk.