projectlicks-live07[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation site specifically targeting OpenSea, a leading non-fungible token (NFT) marketplace. Analysis indicates the site is designed to deceive users into believing they are interacting with the legitimate OpenSea platform, likely to facilitate unauthorized transactions or credential harvesting. The threat type is classified as brand impersonation with potential secondary objectives, such as crypto asset theft or account compromise. Infrastructure analysis reveals the domain projectlicks-live07.vercel.app is currently active and resolves to IP address 64.29.17.67, hosted on Amazon.com, Inc. infrastructure (AS16509). The domain was registered through Tucows Domains Inc. on February 22, 2026, though this future-dated registration suggests possible manipulation or misconfiguration. Security vendors on VirusTotal flag the domain at a ratio of 8/95, indicating moderate detection but sufficient concern for immediate action. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds. The SSL certificate is issued by Google Trust Services (WR1), which does not mitigate the inherent risk of the impersonation scheme. Mitigation steps specific to this brand impersonation threat include immediate blocking of the domain and its resolving IP address (64.29.17.67) at the network perimeter. Organizations should deploy indicators of compromise (IOCs) across security controls, including web proxies, endpoint detection and response (EDR) systems, and email gateways. Users should be alerted to verify domain authenticity before interacting with any platform claiming affiliation with OpenSea, particularly those hosted on third-party services like Vercel. Monitoring for similar impersonation patterns, such as lookalike domains or subdomains, is recommended to preempt further abuse.