mintingnow-opnsea45[.]vercel[.]app

mintingnow-opnsea45.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. The domain resolves to the IPv4 address 64.29.17.3, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site presents a TLS certificate issued by Google Trust Services under the WR1 label, indicating a valid HTTPS endpoint, and the HTTP response code returned by the server is 451, signalling that the content is unavailable. The page title returned by the server is “Deployment Unavailable”, and the underlying technology stack is identified as Vercel with HTTP Strict Transport Security (HSTS) enabled. VirusTotal analysis shows that 11 of 93 scanned security vendors flagged the domain as malicious, corroborating the classification of a crypto drainer.

The domain is currently listed on four external blocklists and has been explicitly blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura filtering services. The risk rating assigned by the reporting system is high, and the operational status is recorded as offline. The available evidence points to a short‑lived infrastructure typical of cryptocurrency‑related scams that rely on disposable cloud hosting.

While the page content is not publicly accessible, the combination of a recent registration date, Amazon‑hosted IP, valid Google certificate, and multiple vendor detections suggests intentional abuse rather than an accidental misconfiguration. Defenders should continue to block the domain at network perimeter devices, update threat‑intel feeds with the observed indicators of compromise, and monitor for any re‑use of the underlying IP address or similar Vercel‑hosted subdomains. Ongoing observation is recommended to detect possible re‑deployment under a different hostname.