opensea-nftbox27-omega[.]vercel[.]app

The domain opensea-nftbox27-omega.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and is hosted on infrastructure owned by Amazon.com, Inc. (AS16509) with the address 216.198.79.195 located in the United States. The site presented the HTTP status code 451 and the page title "Deployment Unavailable," indicating that the front‑end service was intentionally taken offline at the time of analysis. TLS termination is provided by a Google Trust Services certificate issued to the WR1 entity, and the site employed HSTS, a standard security header.

Automated scanning services have flagged the domain as a crypto‑related brand impersonation: PhishDestroy and ScamSniffer list it on their blocklists, Google Safe Browsing classifies it as social engineering, and VirusTotal recorded detections from ten of ninety‑three scanned security vendors. The domain appears on two additional security blocklists, reinforcing its malicious reputation. The technology fingerprint shows the use of Vercel, a common hosting platform for rapid deployments, which does not by itself imply malicious intent but aligns with the observed infrastructure.

Defenders should add the IP address 216.198.79.195 and the domain name to network‑level deny lists, monitor DNS queries for the domain, and enforce strict outbound filtering for any traffic attempting to resolve or contact the address. Because the site is currently offline, real‑time payload analysis is not possible, but the existing evidence—brand impersonation of OpenSea, crypto‑scam classification, and multiple independent detections—justifies a high‑severity remediation posture. Continuous threat‑intel feeds should be consulted for any re‑activation attempts, and any internal alerts referencing the domain should be escalated as confirmed malicious activity.