dashboard[.]api-listing-opensea[.]com

This domain, dashboard.api-listing-opensea.com, is currently offline but was actively flagged as a high‑risk brand‑impersonation site targeting OpenSea. The domain was registered on 10 September 2024 through Hosting Concepts B.V. d/b/a Registrar.eu and uses the nameservers ina1.registrar.eu, ina2.registrar.eu, ina3.registrar.eu, ns1.openprovider.nl and ns2.op. DNS resolution points to 15.197.130.221, an address located in the United States and owned by Amazon.com, Inc. (AS16509). No TLS certificate is presented, meaning any client that would reach the site would do so over plain HTTP. VirusTotal records show that 11 of 95 security vendors have flagged the domain, and Google Safe Browsing classifies it as a social‑engineering threat.

The domain appears on a single external blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, confirming the malicious reputation. The only page‑title observed is the literal domain string, providing no additional context. Defenders should immediately add dashboard.api-listing-opensea.com to URL filtering rules and block the associated IP 15.197.130.221 at the network perimeter.

Because the hosting provider is Amazon AWS, consider reviewing other recent AWS‑hosted domains that share the same ASN for similar impersonation patterns. Monitoring for newly registered sub‑domains under registrar.eu that contain “opensea” or “api‑listing” may help detect future campaigns. Given the lack of SSL and the offline status, the site is not currently reachable, but the infrastructure indicates a typical drop‑per‑site setup that could be re‑activated. Continuous threat‑intel feeds should be consulted for any re‑appearance, and incident response teams should be prepared to advise users of OpenSea to ignore any unsolicited requests referencing a “dashboard” or “api‑listing” URL that matches this pattern.