live-openseasmint26[.]vercel[.]app

The domain live-openseasmint26.vercel.app is flagged as a high-risk brand-impersonation site targeting the OpenSea marketplace. Registration data shows the domain was created on February 21 2026 through Tucows Domains Inc., indicating a recent deployment. DNS resolution points to the IPv4 address 216.198.79.67, which is advertised as part of Amazon.com, Inc. (AS16509) and geolocated to the United States. The host infrastructure reports Vercel as the application platform and HSTS enforcement, confirming that HTTPS is enforced. The TLS certificate is issued by Google Trust Services under the WR1 certificate authority, matching the domain name.

When accessed, the HTTP response code returned was 451, a “Unavailable For Legal Reasons” status, and the page title returned was “Deployment Unavailable.” This combination suggests that the site has been taken offline, either by the operators or by a takedown request. The current status is recorded as offline, and multiple security-filtering services—including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—have already blocked the host. VirusTotal analysis shows that 15 of 95 scanned security vendors flagged the domain as malicious, and the domain appears on five public blocklists. The intelligence attributes the site to a “Crypto Scam” category and explicitly notes impersonation of OpenSea. No further content analysis is available because the site no longer serves pages, and the page title provides no additional clues about the phishing flow.

Consequently, the primary evidence rests on registration timing, hosting characteristics, TLS provenance, HTTP status, blocklist presence, and the vendor detection tally. Defenders should immediately add live-openseasmint26.vercel.app to domain-block lists, enforce DNS sink-holing, and monitor the associated IP address for any future redeployment.