opensea-login-help-io[.]pages[.]dev
“Suspected phishing site | Cloudflare”
opensea-login-help-io.pages.dev — Contenido no disponible. Suplantación de marca: OpenSea; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 4/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, Fortinet); URLScan malicious verdict; PhishDestroy score 65/100. Registrador: Cloudflare.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain opensea-login-help-io.pages.dev was registered through Cloudflare, Inc. on February 21 2026 and is served from the Cloudflare edge network (nameservers troy.ns.cloudflare.com and perla.ns.cloudflare.com). DNS resolution points to IP 172.66.44.103, which belongs to AS13335 Cloudflare, Inc., located in the United States. The site presents a TLS certificate issued by Google Trust Services (WE1), confirming that HTTPS is enforced. HTTP analysis returns a 403 status code together with the page title “Suspected phishing site | Cloudflare”, indicating that the content has been taken down by the hosting provider. Detected technologies include HSTS and HTTP/3, both typical of modern Cloudflare deployments.
VirusTotal scans show that four of ninety‑three antivirus engines flagged the domain, providing modest detection confidence. The Gridinsoft trust score is 0 / 100, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. Intelligence categorises the infrastructure as a crypto‑related brand impersonation campaign targeting OpenSea, and the site is labelled a “crypto scam”. At the time of analysis the domain is offline, which aligns with the 403 response and blocklist status.
Evidence confirms the domain’s association with Cloudflare hosting, the use of a legitimate SSL certificate, and a modest level of detection by security vendors. However, no payload, credential‑harvesting page, or further malicious artifacts have been captured, leaving the exact phishing methodology unknown. Defenders should continue to block the domain at DNS and proxy layers, add the IP address 172.66.44.103 to deny lists, and monitor for re‑registration or resurrection of similar subdomains under the same parent zone. Regular re‑scanning with multi‑engine services is advised to capture any future changes in malicious behavior.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Inteligencia forense
Tecnologías · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of opensea-login-help-io.pages.dev · checked Apr 19, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.