opensea-mintslive98[.]vercel[.]app

opensea-mintslive98.vercel.app is an active crypto‑drainer infrastructure observed on 29 July 2026. The domain resolves to the IPv4 address 216.198.79.195 and is hosted on Vercel’s platform, as indicated by the registrar information. The domain was originally registered on 28 January 2020, suggesting the attacker has retained control for several years. Reputation services flag the site: Google Safe Browsing classifies it as a social‑engineering threat, while VirusTotal reports that 16 of 91 scanned security vendors have identified malicious behavior. The domain is currently listed on three public blocklists and has been manually blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that it is used to illicitly acquire cryptocurrency assets.

The precise impersonated brand or landing‑page content has not been disclosed in the available intelligence, so attribution to a specific service cannot be confirmed. Nevertheless, the “crypto drainer” label indicates that the site likely attempts to lure victims into authorising wallet transactions that transfer funds to attacker‑controlled addresses. The presence of multiple security vendor detections and a Google Safe Browsing flag demonstrates a high confidence level of malicious intent, matching the assigned high risk rating.

Defenders should add 216.198.79.195 and opensea‑mintslive98.vercel.app to network and DNS block policies, enforce strict wallet transaction confirmations, and monitor for any unauthorized token approvals originating from users who may have visited the site. Continuous re‑scanning of the domain with updated threat‑intel feeds is advised, as the infrastructure may evolve or host additional payloads. Organizations that rely on Vercel‑hosted assets should review Vercel’s abuse‑reporting procedures to request takedown if the domain is confirmed to be used for illicit activity.