offre-opensea-io[.]web[.]app

This domain, offre-opensea-io.web.app, is currently active and engaged in brand impersonation specifically targeting OpenSea, a prominent non-fungible token (NFT) marketplace. Analysis indicates the infrastructure is designed to deceive users into interacting with fraudulent interfaces, likely facilitating unauthorized transactions or credential harvesting under the guise of legitimate OpenSea services. The page title observed during initial scans reads 'Loading...', a common tactic to delay detection while malicious payloads or interfaces are dynamically loaded. Infrastructure analysis reveals the domain was registered on April 27, 2026, through Google LLC, and resolves to the IP address 199.36.158.100, hosted within the United States under Google LLC's infrastructure. The SSL certificate is issued by Google Trust Services (WR4), providing a veneer of legitimacy. Despite this, the domain has been flagged by 3 of 95 security vendors on VirusTotal, indicating low but non-negligible detection coverage. Additionally, the domain appears on three independent security blocklists, including those maintained by specialized threat intelligence providers focused on financial and cryptocurrency-related fraud. Current status confirms the domain remains operational, posing an ongoing risk to users unfamiliar with OpenSea’s authentic domain structure. Organizations and individuals are advised to implement immediate countermeasures, including blocking the domain and associated IP address at the network perimeter. End-users should be educated to verify domain authenticity before interacting with any platform purporting to represent OpenSea, particularly those hosted on third-party services such as web.app. Monitoring for similar patterns—such as newly registered domains impersonating cryptocurrency platforms—is recommended to preempt further exploitation attempts.