opnsea-logn-en[.]square[.]site

Analysis of opnsea-logn-en.square.site shows it is actively resolving to IP 74.115.51.4, a host located in the United States and associated with Weebly, Inc. The domain is served by four Amazon Route 53 name servers (ns-1248.awsdns-28.org, ns-1816.awsdns-35.co.uk, ns-311.awsdns-38.com, ns-810.awsdns). Registration was completed on February 5 2019 through MarkMonitor Inc., and the domain remains active as of the July 14 2026 assessment. VirusTotal reports that three of ninety‑one security vendors have flagged the domain, indicating that at least a subset of scanners have identified malicious characteristics. The threat classification is generic_phishing with a high risk rating. No public page content or brand‑specific indicators have been disclosed, so the exact phishing lure remains unknown. Defenders should treat the domain as hostile, enforce network‑level blocking, monitor DNS queries for the listed name servers, and consider adding the IP address to threat‑intel feeds. Continuous re‑evaluation is advised, as additional analysis of the site’s payload could reveal further indicators of compromise.