tab-open-sea[.]pages[.]dev

On July 22, 2026, the domain tab-open-sea.pages.dev was identified as a brand impersonation threat targeting OpenSea, a well-known platform for NFTs. This domain is flagged as a potential crypto scam, with a 403 HTTP status indicating that access to the site is currently forbidden. The SSL certificate for the domain is issued by Google Trust Services, which is a reputable certificate authority, but this does not necessarily imply the domain's legitimacy. The Gridinsoft trust score for the domain is 0 out of 100, reflecting a high level of suspicion.

The domain is hosted by Cloudflare, Inc., and its nameservers are linda.ns.cloudflare.com and tate.ns.cloudflare.com. The domain was created on September 11, 2025, suggesting it has been active for a considerable period. The IP address resolves to 188.114.97.3, located in the United States and managed by Cloudflare, Inc. (AS13335). The page title, 'OpenSea Login — Secure Access to Your NFT Account,' strongly indicates that the site is designed to mimic the legitimate OpenSea login page, potentially to trick users into providing their credentials.

The domain appears on one security blocklist and is currently blocked by PhishDestroy. Analysis indicates that this domain poses an elevated risk to users, particularly those in the crypto and NFT community. Defenders should ensure that their security systems are updated to block this domain and educate users about the dangers of visiting unverified sites, especially those purporting to offer secure access to NFT accounts. It is also recommended to monitor related domains and infrastructure for any signs of re-emergence or similar threats.