openseaproclaims[.]vercel[.]app

PhishDestroy identified openseaproclaims.vercel.app as a sophisticated brand impersonation threat targeting OpenSea users. This domain was crafted to mimic the popular NFT marketplace, likely aiming to harvest login credentials, wallet keys, or trick victims into approving malicious transactions. Though the site is currently offline, its mere existence signals an active threat against the OpenSea community.

Technical analysis reveals compelling evidence of malicious intent. VirusTotal flagged the domain with 9 out of 95 security vendors detecting malicious activity, indicating broad consensus among security tools. The domain was registered through Tucows Domains Inc. on February 21, 2026, a relatively recent creation date typical for phishing infrastructure. It also appears on 3 security blocklists, confirming its reputation as a threat. The SSL certificate was issued by Google Trust Services (WR1), which is legitimate but commonly abused by phishing sites to appear trustworthy. The page title "Deployment Unavailable" suggests the site may have been taken down quickly, but the domain remains active.

Users who visited openseaproclaims.vercel.app should take immediate action. Change any passwords used on the site, enable two-factor authentication on OpenSea and associated email accounts, and monitor wallet addresses for unauthorized transactions. Consider revoking any token approvals granted on the site. Run a full security scan on the device used to access the domain. If any credentials were entered, assume they are compromised and rotate them immediately. Report the domain to OpenSea's security team and relevant authorities to help protect the broader community.