manage-opensea[.]pages[.]dev

The domain manage-opensea.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States). DNS resolution uses the Cloudflare name servers braelyn.ns.cloudflare.com and lee.ns.cloudflare.com, indicating that the attacker leveraged Cloudflare’s DNS infrastructure to hide the true hosting environment. The site presented the page title "Suspected phishing site | Cloudflare" and is classified as a crypto‑scam that impersonates the OpenSea brand.

Technical fingerprints show HSTS enabled, HTTP/3 support, and a TLS certificate issued by Google Trust Services (certificate identifier WE1), confirming the use of legitimate CDN and certificate authorities to increase credibility. VirusTotal recorded 10 detections out of 95 scanned vendors, and the domain appears on one external security blocklist. PhishDestroy has actively blocked the domain, and Gridinsoft assigned a trust score of 0/100, reinforcing the malicious assessment.

HTTP responses returned a 403 status code, and the domain is currently offline, suggesting that takedown actions have been applied but the underlying infrastructure remains accessible via the Cloudflare edge. Defenders should continue to block the domain at network perimeters, monitor for any future DNS changes that could reactivate the site, and enforce strict verification of any OpenSea‑related communications. Because the site is offline, content‑level analysis is limited; however, the combination of brand impersonation, cryptoscam labeling, multiple vendor detections, and low trust scores provides sufficient evidence to treat the domain as a high‑confidence malicious indicator and to incorporate it into threat‑intel feeds for proactive protection.