opensea-box3-five[.]vercel[.]app

This domain, opensea-box3-five.vercel.app, poses a high-risk brand impersonation threat targeting users of the OpenSea non-fungible token (NFT) marketplace. The site replicates the legitimate OpenSea.io interface to deceive visitors into connecting cryptocurrency wallets or entering sensitive credentials, likely facilitating unauthorized transactions or credential theft. The page title explicitly displays 'OpenSea.io,' and the infrastructure is designed to exploit trust in the OpenSea brand, a common tactic in cryptocurrency-related fraud schemes. Analysis indicates the domain was registered on April 16, 2026, through Vercel Inc., and resolves to the IP address 216.198.79.195, hosted in the United States. It is flagged by 16 out of 95 security vendors on VirusTotal, and appears on four distinct security blocklists. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, is frequently abused by malicious actors to lend credibility to fraudulent sites. The domain remains active as of this report, increasing the risk of exposure to potential victims. Users who have visited opensea-box3-five.vercel.app should immediately disconnect any connected wallets and revoke permissions via their wallet provider’s interface. Monitor transaction histories for unauthorized activity and consider replacing compromised credentials if sensitive information was entered. Report the domain to relevant security teams or abuse contacts, and avoid interacting with any links or assets associated with this infrastructure. Exercise caution with unsolicited messages or links claiming affiliation with OpenSea or other cryptocurrency platforms.