nftsession0pnseaproject6[.]vercel[.]app

This domain, nftsession0pnseaproject6.vercel.app, poses a high-risk brand impersonation threat specifically targeting OpenSea users. Analysis indicates the infrastructure is designed to mimic the legitimate OpenSea platform, likely to deploy crypto drainer scripts or harvest wallet credentials. The fraudulent site replicates OpenSea’s branding, interface, and even adopts the page title 'OpenSea.io' to deceive victims into connecting wallets or entering sensitive information, leading to unauthorized asset transfers or account compromise. Evidence supporting this assessment includes detection by 11 out of 95 security vendors on VirusTotal, with the domain appearing on three independent security blocklists. Infrastructure analysis reveals the domain was registered on April 16, 2026, through Vercel Inc., and currently resolves to the IP address 216.198.79.131, hosted in the United States. The SSL certificate, issued by Google Trust Services (WR1), further obscures malicious intent by presenting a seemingly legitimate encryption layer. The domain’s registration details and hosting provider align with patterns observed in prior crypto-focused phishing campaigns. Users who have visited nftsession0pnseaproject6.vercel.app or interacted with its content should immediately disconnect any connected wallets and revoke permissions via their wallet’s connected sites feature. All crypto assets should be transferred to a new, secure wallet, and transaction histories reviewed for unauthorized activity. System scans for malware are recommended, as crypto drainers often deploy secondary payloads. If credentials were entered, passwords for all associated accounts should be reset from a clean device. Organizations and individuals are advised to block this domain at the network level and monitor for similar impersonation attempts leveraging Vercel-hosted infrastructure.