collector-with[.]com

This domain, collector-with.com, operates as a credential harvesting platform impersonating OpenSea, the leading non-fungible token (NFT) marketplace. The site presents a fraudulent wallet connection interface titled 'Connect wallet | OpenSea,' designed to capture cryptocurrency wallet credentials, seed phrases, and private keys from unsuspecting users attempting to access NFT trading services. Analysis indicates the infrastructure specifically targets users of decentralized finance (DeFi) platforms, exploiting the trust associated with the OpenSea brand to facilitate unauthorized asset transfers and account takeovers. Infrastructure analysis reveals the domain was registered on March 13, 2026, and currently resolves to IP address 138.197.91.95 hosted on AS14061 DigitalOcean, LLC in the United States. Security telemetry shows 11 out of 95 detection engines on VirusTotal flag the domain as malicious, while it appears on three distinct security blocklists. The site employs an SSL certificate identified as R13, and has been proactively blocked by multiple wallet security providers. Despite its current offline status, historical DNS records confirm active malicious operations prior to takedown. Users who visited collector-with.com or interacted with its wallet connection interface should immediately revoke any connected wallet authorizations and transfer assets to a new wallet with a fresh seed phrase. Examine all connected applications for suspicious permissions and monitor transaction histories for unauthorized activity. Consider reporting the incident to relevant blockchain security teams and local cybercrime authorities. The domain's creation date and detection patterns suggest this may be part of a larger campaign targeting NFT marketplaces, warranting heightened vigilance across similar platforms.