mintingnow-opnsea20[.]vercel[.]app

Analysis indicates that the domain mintingnow-opnsea20.vercel.app was registered on 2026-02-21 through Tucows Domains Inc. The site resolves to IP 216.198.79.195, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The hosting platform is identified as Vercel, and the TLS certificate is issued by Google Trust Services under the WR1 label, confirming a valid HTTPS endpoint. HTTP response code 451 and the page title “Deployment Unavailable” show that the service is currently taken offline. The domain employs HTTP Strict Transport Security (HSTS), a typical Vercel configuration. Threat intelligence classifies the domain as a crypto drainer.

VirusTotal scanned the host and 13 of 95 security vendors reported it as malicious. The domain is listed on four external blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. These detections corroborate the high‑risk rating. Uncertainties remain regarding the specific payload or wallet addresses used in the alleged draining activity, as no additional forensic artifacts or victim reports have been published.

The page content beyond the title was not captured, and no Safe Browsing or OTX entries were provided in the source data. Defenders should continue to block the domain at the network perimeter and DNS resolver, monitor outbound connections to the associated IP address, and enforce strict TLS inspection to detect any anomalous traffic. Given the high risk and confirmed presence on multiple blocklists, security teams should add the domain to internal blacklists and consider sharing the indicator with threat‑sharing communities. Ongoing observation of the IP reputation and any re‑activation of the Vercel deployment is advised.