openseacson[.]vercel[.]app

On July 24, 2026, the domain openseacson.vercel.app was observed in an offline state after being taken down. The domain was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 64.29.17.131, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The TLS certificate presented is issued by Google Trust Services under the WR1 profile, indicating a standard HTTPS configuration without any self‑signed anomalies. HTTP requests to the host return status code 451, and the page title returned by the server is “Deployment Unavailable”, suggesting that the Vercel deployment is no longer active.

The site is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the suspicion of malicious intent. VirusTotal has processed the domain with 95 antivirus engines and reported no detections; however, the absence of detections does not confirm the domain’s safety. The infrastructure uses Vercel hosting and enforces HTTP Strict Transport Security (HSTS). The domain is identified as a crypto‑related scam that impersonates the OpenSea brand, as indicated by the “Impersonates: OpenSea” tag.

While the current offline status limits immediate threat interaction, the combination of recent registration, dedicated hosting on a cloud provider, brand impersonation, and inclusion on a phishing blocklist warrants continued monitoring. Defenders should add the domain to blocklists, monitor DNS resolution for any re‑activation, and watch for similar Vercel‑hosted subdomains targeting OpenSea users. Further analysis of any revived content should focus on credential‑phishing forms or malicious smart‑contract interactions that are typical of crypto scams.