opensea--login[.]pages[.]dev
Verifica phishing e sicurezza per opensea--login.pages.dev
“Suspected phishing site | Cloudflare”
opensea--login.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: OpenSea; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 11/93 (ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, ESET); CF Radar malicious; PhishDestroy score 83/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of the domain opensea--login.pages.dev indicates it was a confirmed phishing site targeting OpenSea users, classified as a crypto scam. The domain, registered on February 21, 2026, through Cloudflare, Inc., resolved to the IP address 188.114.97.3, which is associated with Cloudflare, Inc. (AS13335) and geolocated in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (yoxall.ns.cloudflare.com and bella.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), suggesting an attempt to appear legitimate through HTTPS enforcement and HSTS policies. Detection metrics show the domain was flagged by 11 of 93 security vendors on VirusTotal, though the specific signatures or heuristics triggering these detections are not detailed in available intelligence.
The domain appears on at least one security blocklist, specifically PhishDestroy, and was assigned a Gridinsoft trust score of 0/100, indicating high confidence in its malicious classification. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its identification as a phishing endpoint, though the exact content or functionality of the site prior to takedown remains unconfirmed. As of July 25, 2026, the domain has been taken offline, returning an HTTP 403 status code.
Defenders are advised to treat this domain as a confirmed phishing threat, particularly for organizations handling cryptocurrency or OpenSea-related traffic. Network-level blocks should be implemented for the domain and its associated IP (188.114.97.3), and security teams should monitor for related infrastructure, such as additional Cloudflare-hosted subdomains or domains registered through the same registrar. Given the use of Cloudflare's platform, defenders may also investigate whether other phishing campaigns leverage similar naming conventions (e.g., brand--login.pages.dev) to proactively identify emerging threats.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 2 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo