magic-eden-wallet[.]vercel[.]app

This domain, magic-eden-wallet.vercel.app, is actively engaged in brand impersonation targeting Magic Eden, a known NFT and ordinals wallet platform. The infrastructure is designed to deceive users into interacting with fraudulent wallet interfaces, likely facilitating crypto asset theft through drainer mechanisms. Analysis confirms the domain remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. It resolves to IP address 64.29.17.3, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common characteristic of both legitimate and malicious deployments. Security vendors have detected the domain with 2 of 95 VirusTotal engines flagging it as malicious. The page title, "Magic Eden Wallet - Your Wallet For All Things NFT & Ordinals," directly mimics the branding of the legitimate Magic Eden platform. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, further indicating its malicious intent. Current status confirms the domain remains active, posing an ongoing threat to users seeking NFT and crypto wallet services. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users should be educated to verify wallet interfaces through official channels only, avoiding third-party links or unsolicited prompts. Monitoring for similar impersonation domains using the same hosting provider or certificate authority patterns is recommended for proactive threat mitigation.