mintingnow-opnsea23[.]vercel[.]app

The domain mintingnow-opnsea23.vercel.app was registered through Tucows Domains Inc. on 2026‑02‑21. Network resolution points to IP 216.198.79.131, an address owned by Amazon.com, Inc. (AS16509) in the United States. The host presents a TLS certificate issued by Google Trust Services under the WR1 designation, indicating use of standard Vercel hosting infrastructure, which also advertised HSTS support. An HTTP request returns status code 451, and the only observable page title is “Deployment Unavailable,” confirming that the site is currently taken offline.

Intelligence sources list the domain on five independent security blocklists—PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—each categorising it as a crypto‑related scam. VirusTotal analysis shows that 12 of 93 scanning engines flagged the domain, reinforcing the malicious assessment. The declared scam type is “Crypto Scam,” and the threat taxonomy supplied identifies it specifically as a “crypto drainer,” a class of actors that attempt to exfiltrate cryptocurrency assets from victims. No additional content has been captured, so the exact phishing flow, credential‑stealing pages, or wallet addresses remain unknown.

Defenders should immediately block the domain and its associated IP address at perimeter and DNS layers, enforce TLS inspection to capture any encrypted payload, and add the observed host to internal threat‑intel feeds. Ongoing monitoring of the hosting provider’s sub‑domain space and the registrar’s newly created domains is recommended, as the rapid creation date suggests a short‑lived campaign that may spawn further variants. The presence on multiple blocklists and the multi‑engine VirusTotal detections provide sufficient confidence to treat the domain as high‑risk and to apply remediation actions without further investigative delay.