airdrop-tokenmints7[.]vercel[.]app

The domain airdrop-tokenmints7.vercel.app is currently active and classified as a high-risk brand impersonation threat targeting OKX, a major cryptocurrency exchange platform. Analysis indicates the site mimics legitimate airdrop promotions to deceive users into disclosing wallet credentials or transferring funds to attacker-controlled addresses. The page title, "OpenSea.io," further suggests an attempt to confuse victims by referencing a well-known NFT marketplace, despite the domain’s primary impersonation of OKX services. Infrastructure analysis reveals the domain was registered through Vercel Inc. and resolves to the IP address 216.198.79.195, located in the United States. The domain was created on March 23, 2026, though this date may reflect spoofed registration data. Security vendors have flagged the domain, with 10 out of 95 VirusTotal engines detecting it as malicious. It appears on three independent security blocklists, and its SSL certificate is issued by Google Trust Services (WR1). The domain remains unblocked by some major security providers but is actively restricted by others, including PhishDestroy, MetaMask, and SEAL. Current assessment confirms the domain remains operational and poses a significant risk to users. Organizations and individuals are advised to block the domain at the network level and update endpoint protection rules to prevent access. Users who may have interacted with the site should immediately revoke any connected wallet permissions, transfer assets to a secure address, and monitor accounts for unauthorized transactions. Security teams should treat this domain as part of a broader campaign targeting cryptocurrency users and correlate its indicators with other known phishing infrastructure.