opensea[.]io[.]listings-offer[.]com

PhishDestroy identifies opensea.io.listings-offer.com as an active cryptocurrency drainer domain engaged in brand impersonation of OpenSea. Current status remains under investigation as analysts assess threat vectors and campaign scope. This domain leverages deceptive naming conventions to exploit user trust in legitimate NFT marketplace platforms.

This domain was flagged by 4 of 95 VirusTotal vendors, indicating undetected malicious activity at the time of analysis. Tucows Domains Inc. serves as registrar for the domain, which resolves to IP address 24.199.113.255. The domain was registered on March 25, 2026, with a Let's Encrypt SSL certificate issued for enhanced deception. Trust scores remain unassessed due to limited detection coverage.

Analysts recommend immediate avoidance of this domain due to confirmed impersonation attempts and potential cryptocurrency theft vectors. Users should verify domain authenticity through PhishDestroy's real-time threat intelligence platform before any interaction. Blocklists should be updated to prevent accidental exposure, and security teams are advised to monitor for associated IP addresses and certificate patterns. Further investigation continues to determine full campaign scope and potential secondary payloads.