openseaczs[.]vercel[.]app

Analysis shows that openseaczs.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. The domain resolves to 216.198.79.131, an address owned by Amazon.com, Inc. (ASN 16509) located in the United States. The site presented an HTTP 451 response with the page title “Deployment Unavailable” and served a TLS certificate issued by Google Trust Services under the WR1 intermediate, indicating a legitimate certificate chain but not confirming the intent of the host. The infrastructure is hosted on Vercel and HSTS is enforced, which is typical for legitimate Vercel deployments but does not mitigate the malicious use of the platform. The domain appears on a single security blocklist, PhishDestroy, and is flagged by Google Safe Browsing for social engineering.

VirusTotal recorded detections from 16 of 95 scanned vendors, reinforcing the classification of the site as malicious. The threat is catalogued as a crypto‑related scam that impersonates the OpenSea brand, consistent with the supplied brand target and scam type. No additional content beyond the “Deployment Unavailable” title has been observed, and the current status is marked offline. Defenders should add openseaczs.vercel.app to URL filtering and blocklists, enforce outbound DNS filtering for the 216.198.79.131 IP range, and monitor any traffic to Vercel‑hosted assets originating from the same ASN.

Given the Google Safe Browsing and multiple vendor detections, automated blocking is justified. Continuous re‑scanning of the domain is recommended in case the site is re‑hosted, and any internal alerts referencing OpenSea‑related credential or wallet requests should be correlated with this indicator. The combination of recent registration, brand impersonation, and multi‑vendor detection makes the domain a high‑risk artifact that warrants immediate remediation.