nft-sea[.]vercel[.]app

The domain nft-sea.vercel.app is currently flagged as an active crypto drainer phishing site, targeting users of decentralized finance and non-fungible token platforms. This infrastructure is designed to siphon cryptocurrency assets from victims by exploiting wallet connection prompts and malicious smart contract interactions. No legitimate brand impersonation is observed, but the domain leverages a high-trust hosting provider to evade immediate suspicion. Analysis indicates the domain was registered through Vercel on April 27, 2026, and resolves to the IP address 64.29.17.131, located in the United States under Vercel, Inc. Despite its recent creation, the domain has already been flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 0 detections out of 95 vendors, suggesting the campaign is still evading widespread automated detection. The SSL certificate is issued by Google Trust Services (WR1), further masking its malicious intent behind a legitimate certificate authority. The domain remains active as of the latest verification, posing a continued risk to users interacting with decentralized applications. Security teams are advised to block the domain and associated IP address at the network level. End users should avoid connecting wallets or approving transactions on this site, and verify domain authenticity through official project channels. Monitoring for similar patterns under Vercel-hosted subdomains is recommended due to the platform's frequent exploitation in crypto drainer campaigns.