airdrop-tokenmints3[.]vercel[.]app

Analysis of airdrop-tokenmints3.vercel.app indicates that the domain was registered on March 23 2026 through Vercel Inc. and resolved to the IPv4 address 64.29.17.131, which is hosted in the United States and associated with Vercel infrastructure. The site presented the page title “OpenSea.io,” a likely attempt to lure users interested in NFT marketplaces. The TLS certificate is issued by Google Trust Services under the WR1 root, confirming a valid HTTPS connection, and the server advertised HTTP Strict Transport Security. An HTTP 451 response was returned at the time of inspection, and the domain is currently listed as taken offline. Reputation services uniformly rate the domain as malicious.

Gridinsoft assigned a trust score of 0 out of 100. The domain appears on three independent blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal recorded 15 detections out of 94 scanned scanners, confirming that multiple security engines flag the site as hostile. The observed scam type is a “Fake Airdrop,” consistent with crypto‑drainer campaigns that aim to harvest private keys or wallet credentials.

No additional technical artefacts such as malicious scripts or command‑and‑control endpoints were disclosed in the provided intelligence. Uncertainty remains regarding the exact payload delivered to victims, as the page content has not been captured and the site is offline. Defenders should continue to block the hostname at perimeter security and DNS filtering layers, monitor for any related indicators of compromise that reference the IP address 64.29.17.131 or the Google‑issued certificate fingerprint, and update threat‑intel feeds with the observed blocklist entries. Incident response teams should also advise users to disregard any unsolicited airdrop offers referencing OpenSea or similar NFT platforms, and to verify that wallet interactions occur only through trusted, official URLs.