opensea[.]io-discover[.]at

This domain, opensea.io-discover.at, poses a high-risk brand impersonation threat targeting OpenSea users. The site presents itself as a legitimate NFT marketplace with the page title 'OpenSea, exchange everything — token trading and NFT marketplace,' designed to trick visitors into entering sensitive credentials or connecting cryptocurrency wallets. The fraudulent nature of the site is evident through its deceptive interface, which closely resembles OpenSea’s official platform, increasing the likelihood of successful social engineering attacks. Analysis indicates this domain was registered on May 21, 2024, through Hosting Concepts B.V. / Registrar.eu, a registrar frequently associated with malicious domains. It is flagged by 19 out of 95 security vendors on VirusTotal, and Google Safe Browsing has classified it under 'SOCIAL_ENGINEERING.' The domain resolves to the IP address 172.67.191.120 and employs Cloudflare’s infrastructure, including Cloudflare Browser Insights and HTTP/3, to evade detection. Additionally, it uses a Let’s Encrypt SSL certificate, which, while providing encryption, is commonly exploited by phishing sites to appear legitimate. If you visited opensea.io-discover.at, immediate action is required. Disconnect any wallets or accounts linked to the site and revoke permissions for any connected applications. Scan your device for malware using updated security software, as phishing sites may deploy malicious payloads. Change passwords for any accounts accessed while on the site, especially cryptocurrency wallets or email accounts. Monitor financial transactions for unauthorized activity and report the domain to relevant security teams or blocklists to prevent further victimization.