URLQuery
9 det.
Report“Open Sea For Animals! Wiki: Roblox Codes & Tiers (Oct 2026)”
PhishDestroy first observed openseaforanimals-roblox.wiki on Oct 4, 2026. The hostname explicitly references OpenSea; stored content metadata identifies the same apparent target. The captured page title is “Open Sea For Animals! Wiki: Roblox Codes & Tiers (Oct 2026)”. Stored page analysis classifies the content as nft scam. Current evidence score: 81/100 (critical).
Positive findings are stored from 3 sources: MetaMask, SEAL, and URLQuery. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Oct 4, 2026 at 06:20 UTC. URLQuery recorded 9 detections; no observation timestamp was retained. Additional recorded evidence: URLScan captured the page on Oct 4, 2026 at 04:05 UTC.
The collector marked the hostname reachable on Oct 4, 2026 at 04:05 UTC, but did not retain the HTTP response code. Latest classified outcome: unknown; cause probe inconclusive on Oct 4, 2026 at 02:05 UTC. Registration records for the domain list Spaceship, Inc. as the registrar and Oct 1, 2026 as the creation date. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 104.21.1.92. The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YE2 as the certificate issuer with validity through Dec 30, 2026; checked Oct 4, 2026 at 07:02 UTC.
The content indicators and 3 positive source findings support the current OpenSea-themed nft scam classification.
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP reputation is not attributed to this domain.
adi.ns.cloudflare.comdarwin.ns.cloudflare.comLocation describes the IP network.
03ba0c18da0a686ec5a67c2168b5954a7511a5a33cd7d91c51b4c9d011f6d486Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
104.21.1.92. 8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
38 stored lookalike domains
PD-20261004-C221FB Recipient: abuse@spaceship.com Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (US): 18 U.S.C. § 1343 - Wire Fraud 18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA) 15 U.S.C. § 45 - FTC Act (Deceptive Practices) Federal laws prohibit wire fraud, computer fraud, and deceptive business practices. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Select your country to get official cybercrime contacts, or create a complaint draft →.
Template-based draft · optional AI wording assistance requires separate consent
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowSubmit suspicious domains to our threat database — protect the community
ReportRecent phishing reports and observed availability changes
MonitorMonitor live threats or contest this listing if you believe it's a false positive