opensea-log-net[.]pages[.]dev

This domain, opensea-log-net.pages.dev, was created on 21 February 2026 and is hosted on Cloudflare’s network (ASN 13335, United States). DNS resolution points to IP 172.66.44.203 and the authoritative nameservers are piers.ns.cloudflare.com and joyce.ns.cloudflare.com. The site presents a TLS certificate issued by Google Trust Services under the WE1 label, indicating a valid HTTPS endpoint. HTTP requests return a 403 status code and the page title returned by the server is “Suspected phishing site | Cloudflare”, which aligns with the classification of a brand‑impersonation campaign targeting OpenSea.

Google Safe Browsing has flagged the domain for social engineering, and PhishDestroy has added it to its blocklist. VirusTotal analysis shows that 11 of 93 scanning engines have flagged the domain, reinforcing the malicious assessment. Additional reputation data include a Gridinsoft trust score of 0 / 100 and presence on one security blocklist. Detected technologies include HSTS, Cloudflare’s edge services and HTTP/3 support.

The available intelligence confirms that the domain is being used for a crypto‑related scam that pretends to be associated with OpenSea, although the exact page content could not be inspected because the site is currently offline. Defenders should immediately block the domain at network perimeter, add the IP address to threat‑intel feeds, and monitor for any future resolution changes. Continuous re‑scanning with multi‑engine services is advised to capture any new activity, and any user‑reported attempts to access the domain should be logged and investigated.