opensea[.]io[.]proposal-offers[.]com
opensea.io.proposal-offers.com — Contenido no disponible (HTTP 502). Suplantación de marca: OpenSea; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 8/94 (ChainPatrol, CRDF, CyRadar, ESET, G-Data); URLQuery 1 alert; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 80/100. Registrador: Tucows.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain opensea.io.proposal-offers.com was registered on March 14, 2026 through Tucows Domains Inc. It resolves to the IPv4 address 159.65.255.107, which is hosted by DigitalOcean, LLC (AS14061) in the United States. The web server presents a Let's Encrypt TLS certificate and runs PHP on an Nginx stack. Nameserver delegation points to three njalla-operated resolvers (1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo). VirusTotal analysis recorded eight detections out of ninety‑four security vendors, indicating a moderate level of consensus among scanners.
The domain is listed on three external blocklists, specifically PhishDestroy, MetaMask, and SEAL, and Google Safe Browsing flags it for social engineering. The threat profile classifies the site as a Crypto Scam that impersonates the OpenSea brand, a high‑risk brand‑impersonation scenario. The site is currently taken offline, but its infrastructure remains observable.
No page title or content snapshot is available in the current intelligence set, and there are no additional Open Threat Exchange references. Defenders should add the domain and its associated IP address to inbound and outbound blocking rules, monitor for any re‑registration attempts, and enforce TLS inspection to detect similar Let's Encrypt certificates issued to related hostnames. Continuous re‑query of reputation services is advised to capture any future changes in detection counts or blocklist status.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | opensea.io.proposal-offers.com |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Registration: proposal-offers.com
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain proposal-offers.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 2 identified
Server-side scripting language designed for web development.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Análisis de VirusTotal
Datos y informes externos
PD-20260316-AC1CE9 Recipient: domainabuse@tucows.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.