Phishing sites impersonating OpenSea
PhishDestroy has recorded 605 phishing domains impersonating OpenSea since 2025-07-10, 14 of them in the last 30 days. The most used registrars are Vercel and Tucows Domains; the most common TLDs are .app and .com. The official OpenSea domain is opensea.io: any other site asking for your login or wallet is not OpenSea.
New domains in the last 90 days
How to tell a fake OpenSea site
Official domain: opensea.io.
Words most often added to the brand in reported domains: open, sea, nft, login, openseasmint, exclusive, openseamints, mint, nftsession, pnseaproject.
- Type the address yourself or use a bookmark; phishing links for OpenSea arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- OpenSea will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.
Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.
Latest OpenSea phishing domains
Where they are registered and hosted
Registrars
- Vercel165
- Tucows Domains144
- Cloudflare105
- Netlify27
- NICENIC13
- Registrar.eu12
- Vercel9
- GoDaddy.com8
Hosting networks
- AMAZON-02, US159
- CLOUDFLARENET, US84
- Amazon.com, Inc.81
- AMAZON-02 - Amazon.com, Inc., US80
- CLOUDFLARENET - Cloudflare, Inc., US48
- Cloudflare, Inc.38
- DIGITALOCEAN-ASN, US18
- DigitalOcean, LLC16
Related
Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is OpenSea; share of all PhishDestroy reports: 0.27%.