MALICIOUS — CRITICAL
opencea-clone-react.vercel.app için kimlik avı ve güvenlik kontrolü
opencea-clone-react[.]
This domain is flagged as a high-risk crypto wallet drainer, a threat type designed to siphon digital assets from victims' wallets by impersonating legitimate blockchain services.
- VirusTotal
- 4/94
- Blocklists
- 2 · MetaMask, SEAL
- Kullanılabilirlik
- Gizlenmiş · ulaşılabilir · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
opencea-clone-react.vercel.app — Gizlenmiş · ulaşılabilir (HTTP 200). Dolandırıcılık türü: Crypto Drainer. Kanıt özeti: VirusTotal 4/94 (ChainPatrol, LevelBlue, Seclookup); 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 98/100. Kayıt kuruluşu: Vercel.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
This domain is flagged as a high-risk crypto wallet drainer, a threat type designed to siphon digital assets from victims' wallets by impersonating legitimate blockchain services. Analysis indicates the domain is actively targeting users of decentralized platforms, likely through deceptive smart contract interactions or fake token approval prompts. The infrastructure and naming convention strongly suggest an attempt to mimic OpenSea, a leading NFT marketplace, to exploit user trust and familiarity with the brand. Infrastructure analysis reveals the domain opencea-clone-react.vercel.app was registered through Vercel on March 25, 2026, and currently resolves to the IP address 216.198.79.3, hosted in the United States under Lefkoff Industries. The domain appears on three security blocklists and is actively blocked by at least three major threat intelligence feeds, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 6 out of 95 security vendors flagging this domain as malicious. The SSL certificate is issued by Google Trust Services (WR1), which, while not inherently malicious, is commonly used in phishing campaigns due to its free availability and legitimacy. Mitigation against this crypto wallet drainer requires immediate action from both end-users and network administrators. Users should revoke any suspicious token approvals or smart contract interactions associated with this domain using blockchain explorers or wallet security tools. Network-level protections should include blocking the domain and its resolving IP (216.198.79.3) at firewalls and DNS resolvers. Organizations should also monitor for outbound connections to this IP or domain in logs, as such activity may indicate compromised endpoints. Wallet providers and decentralized application platforms are advised to integrate real-time blocklist checks to prevent users from interacting with this domain. Given the active status of this threat, proactive measures are critical to preventing asset loss.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of opencea-clone-react.vercel.app · checked Mar 26, 2026
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.