opensealogin[.]pages[.]dev

This domain, opensealogin.pages.dev, was created on 21 February 2026 and is hosted behind Cloudflare’s network (AS13335, United States). DNS resolution points to 188.114.97.3 and the authoritative name servers are pete.ns.cloudflare.com and paris.ns.cloudflare.com. The site presents a Google Trust Services / WE1 TLS certificate, but HTTP requests return status code 403 and the page title is “Suspected phishing site | Cloudflare”, indicating that the content has been taken down or blocked. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence in malicious intent.

The domain is listed on one security blocklist and has been actively blocked by the PhishDestroy feed. VirusTotal analysis shows that 12 of 93 scanning engines flag the domain, and Google Safe Browsing classifies it as a social‑engineering threat. Detected technologies include HSTS, Cloudflare, and HTTP/3, consistent with a modern CDN‑based phishing infrastructure. The threat profile is identified as a brand‑impersonation campaign targeting OpenSea and is categorized as a crypto‑scam, although the exact payload or lure has not been disclosed.

Defenders should add the domain and its resolving IP to network blocklists, enforce outbound filtering for Cloudflare‑hosted subdomains, and monitor for additional subdomains that reuse the same name‑server pair. Continuous brand monitoring for OpenSea‑related impersonation and periodic re‑scanning of the URL are recommended to capture any future re‑activation. At present the site is offline, but the underlying infrastructure remains usable for rapid redeployment, so proactive containment is advised.