exclusive0penseamints09[.]vercel[.]app

Analysis of the domain exclusive0penseamints09.vercel.app indicates it was actively used for a crypto scam impersonating OpenSea, a known non-fungible token (NFT) marketplace. The domain was registered on March 17, 2026, through Vercel Inc. and hosted on infrastructure associated with Amazon.com, Inc. (AS16509) in the United States, resolving to the IP address 64.29.17.3. The page title explicitly displayed 'OpenSea.io,' aligning with the reported brand impersonation targeting OpenSea users. Infrastructure checks reveal the domain was taken offline by July 25, 2026, returning an HTTP 451 status code, which typically indicates unavailability due to legal or policy restrictions. The SSL certificate was issued by Google Trust Services (WR1), a common provider for both legitimate and malicious domains.

No nameservers were detected at the time of analysis, which may suggest recent deactivation or misconfiguration. Detection data shows the domain was flagged by 16 out of 94 security vendors on VirusTotal, though the specific detection categories remain unconfirmed. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, all of which specialize in phishing and crypto-related threats. Trust scores from Gridinsoft and Scamadviser both rated the domain at 0/100 and 1/100, respectively, reinforcing its malicious classification.

The scam type is explicitly categorized as a 'Crypto Scam,' though further details about the exact mechanics—such as whether it involved credential harvesting, wallet drainers, or fraudulent token sales—are not available in the provided intelligence. Defenders should treat this domain as high-risk infrastructure and ensure it remains blocked across security controls. Given its association with Vercel, organizations may also monitor for similar patterns in subdomains under vercel.app, particularly those using random or brand-mimicking strings.