opensea[.]to

opensea.to was registered on May 19 2026 via Namecheap and uses Afternic’s default nameservers (ns1.afternic.com, ns2.afternic.com). DNS resolution returns a single IPv4 address 76.223.54.146, which belongs to an AWS Global Accelerator endpoint located in the United States. The site presents a valid GoDaddy DV certificate issued by the GoDaddy TLS Intermediate CA. An HTTP request returns status 200, while the MX record is empty. Gridinsoft assigns a trust score of 0 / 100, indicating extreme risk. The domain is listed on two public blocklists (PhishDestroy, SEAL) and appears in one AlienVault OTX pulse. VirusTotal reports that three of ninety‑two scanners have identified malicious activity, reinforcing the high‑risk rating. The domain is classified as a brand‑impersonation campaign targeting OpenSea and is associated with an NFT‑related scam. Current analysis cannot confirm the exact payload or page content because the site has not been publicly inspected. Defenders should block the domain and its resolving IP, monitor for related DNS or SSL anomalies, and restrict outbound traffic to the AWS Global Accelerator endpoint. Continued observation is recommended to detect any evolution of the infrastructure or additional indicators.