opentrident[.]xyz

Analysis indicates that opentrident.xyz is an active phishing domain targeting users of the OpenTrident Protocol. The domain was registered on April 18, 2026, through Namecheap and currently resolves to the IP address 216.150.1.1, hosted by Vercel, Inc. in the United States. Infrastructure review shows the domain uses nameservers dns1.registrar-servers.com and dns2.registrar-servers.com, consistent with registrar-default configurations. The site returns an HTTP 307 redirect status, a behavior sometimes used to evade detection or forward victims to malicious endpoints. Its page title, 'OpenTrident Protocol,' suggests an attempt to impersonate a legitimate protocol or platform, though the exact nature of the phishing content has not been confirmed through direct analysis. The domain appears on one security blocklist and is flagged by two of 94 vendors in a recent scan. Additionally, it is referenced in one threat intelligence pulse, indicating prior detection by security researchers. Defenders should treat this domain as high-risk. The SSL certificate issued by Let's Encrypt provides transport encryption but does not validate legitimacy. Organizations are advised to block the domain at the DNS or proxy level, monitor for connections to 216.150.1.1, and alert users who may have interacted with the site. Further investigation into the redirect target and any associated payloads is recommended to determine the full scope of the threat.