exclusive0penseamints02[.]vercel[.]app

This domain, exclusive0penseamints02.vercel.app, is identified as an active brand impersonation threat targeting OpenSea, a leading non-fungible token (NFT) marketplace. Analysis indicates the domain is designed to deceive users into believing they are interacting with the legitimate OpenSea platform, potentially facilitating unauthorized transactions or data exfiltration. The domain remains operational as of the latest verification. Infrastructure analysis reveals the domain resolves to IP address 64.29.17.195, hosted by Vercel, Inc. in the United States. It was registered on March 23, 2026, through Vercel Inc. and is currently flagged by 13 of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WR1), a common practice among both legitimate and malicious domains to establish a false sense of security. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence platforms, including PhishDestroy, MetaMask, and SEAL. The page title explicitly mimics OpenSea.io, reinforcing the brand impersonation tactic. Current status confirms the domain remains active, posing a persistent risk to users. The high-risk classification is justified by the combination of brand impersonation, active blocklisting, and vendor detections. Users are advised to avoid accessing this domain entirely. Organizations should update web filters and endpoint protection rules to block the domain and its associated IP address. Individuals who may have interacted with the domain should verify their wallet connections, revoke any suspicious permissions, and monitor for unauthorized transactions. Security teams are encouraged to correlate this domain with other indicators of compromise to identify potential broader campaigns.