livemint-mysteryboxs050[.]vercel[.]app

Analysis identifies livemint-mysteryboxs050.vercel.app as a brand_impersonation threat with an elevated risk classification. The domain presented the page title "OpenSea.io" and exhibited characteristics consistent with impersonation-based social engineering. At the time of review, the site had already been taken offline, reducing immediate exposure but not eliminating the value of historical indicators for detection, attribution, and future monitoring.

Infrastructure analysis reveals that the domain resolved to IP address 64.29.17.195, located in the United States and associated with AS16509 Amazon.com, Inc. The SSL certificate was issued by Google Trust Services / WR1. Registration and hosting records indicate association with Vercel Inc., and the domain creation date is January 28, 2020. Security telemetry shows that 22 of 95 VirusTotal vendors flagged the domain, indicating substantial detection coverage across security engines. The domain appeared on 1 security blocklist and was specifically blocked by PhishDestroy. These indicators collectively support the elevated risk assessment and are consistent with infrastructure previously associated with deceptive or impersonation-oriented campaigns.

The current status is offline, suggesting that the content has been removed or disabled. Even so, historical records should be retained for threat intelligence correlation, IOC matching, and retrospective investigations. Organizations should monitor for related domains using similar naming conventions, review network logs for connections to 64.29.17.195, and maintain blocklist coverage for associated indicators. Users and defenders should avoid interacting with archived copies, unsolicited links, or derivative domains that reuse comparable branding patterns. Continued monitoring is recommended because threat actors frequently migrate impersonation campaigns to new subdomains or infrastructure after takedown events.